CVE-2018-11501: Website Seller Script Project Website Seller Script

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

PHP Scripts Mall Website Seller Script 2.0.3 has CSRF via user_submit.php?upd=2, with resultant XSS.

Affected products

• Website Seller Script Project Website Seller Script: version 2.0.3 only

Published 2018-05-26. Last modified 2026-06-17.