cvedb.io
CVE-2018-14869
MEDIUM · CVSS 5.4
EPSS exploitation probability: 0%
Published 2018-08-06T21:29:00.517 · Last modified 2026-06-17T01:41:47.690

Summary

PHP Template Store Script 3.0.6 allows XSS via the Address line 1, Address Line 2, Bank name, or A/C Holder name field in a profile.

Affected products

php_template_store_script_project — php_template_store_script

Does this affect you?

Add your gear to cvedb and we'll alert you only when php_template_store_script_project ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.