CVE-2019-9605: Online Lottery PHP Readymade Script Project Online Lottery PHP Readymade Script

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

PHP Scripts Mall Online Lottery PHP Readymade Script 1.7.0 has Reflected Cross-site Scripting (XSS) via the err value in a .ico picture upload.

Affected products

• Online Lottery PHP Readymade Script Project Online Lottery PHP Readymade Script: version 1.7.0 only

Published 2019-03-29. Last modified 2026-06-17.