CVE-2018-15897: Website Seller Script Project Website Seller Script

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

PHP Scripts Mall Website Seller Script 2.0.5 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, Company Name, or Fax field, as demonstrated by crossPwn.

Affected products

Published 2018-08-28. Last modified 2026-06-17.