What’s Vulnerable › Vulnerabilities

CVE-2018-20138

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-12-13 · updated 2026-06-17
• Weakness: CWE-79

Description

PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.

Affected products

• Readymadeb2Bscript Entrepreneur B2B Script: 3.0.6

References

• https://suku90.wordpress.com/2018/12/13/php-b2b-script-stored-xss/
• https://suku90.wordpress.com/2018/12/13/php-b2b-script-stored-xss/

Get alerted when CVE-2018-20138 or the next vulnerability affects your stack