CVE-2018-7650

PHP Scripts Mall Hot Scripts Clone:Script Classified Version 3.1 Application is vulnerable to stored XSS within the "Add New" function for a Management User. Within the "Add New" section, the application does not sanitize user supplied input to the name parameter, and renders injected JavaScript code to the user's browser. This is different from CVE-2018-6878.

• CWE-79

• https://neetech18.blogspot.in/2018/03/stored-xss-vulnerability-in-hot-scripts.htmlExploit, Third Party Advisory
• https://neetech18.blogspot.in/2018/03/stored-xss-vulnerability-in-hot-scripts.htmlExploit, Third Party Advisory

Published

Mar 6, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7641An issue was discovered in CImg v.220. A heap-based buffer o…
• CVE-2018-7642The swap_std_reloc_in function in aoutx.h in the Binary File…
• CVE-2018-7643The display_debug_ranges function in dwarf.c in GNU Binutils…
• CVE-2018-7644The XmlSecLibs library as used in the saml2 library in Simpl…
• CVE-2018-7648An issue was discovered in mj2/opj_mj2_extract.c in OpenJPEG…9.8
• CVE-2018-7649Monitorix before 3.10.1 allows XSS via CGI variables.
• CVE-2018-7651index.js in the ssri module before 5.2.2 for Node.js is pron…
• CVE-2018-7652lib/Zonemaster/GUI/Dancer/Export.pm in Zonemaster Web GUI be…6.1
• CVE-2018-7653In YzmCMS 3.6, index.php has XSS via the a, c, or m paramete…
• CVE-2018-7654On 3CX 15.5.6354.2 devices, the parameter "file" in the requ…
• CVE-2018-7658NTSServerSvc.exe in the server in Softros Network Time Syste…
• CVE-2018-7659In OpenText Documentum D2 Webtop v4.6.0030 build 059, a Stor…