Vulnerabilities > Consumer Reviews Script Project

DATE CVE VULNERABILITY TITLE RISK
2019-03-21 CVE-2018-20627 Cross-site Scripting vulnerability in Consumer Reviews Script Project Consumer Reviews Script 4.0.3
PHP Scripts Mall Consumer Reviews Script 4.0.3 has HTML injection via the search box.
3.5
2019-03-21 CVE-2018-20626 Path Traversal vulnerability in Consumer Reviews Script Project Consumer Reviews Script 4.0.3
PHP Scripts Mall Consumer Reviews Script 4.0.3 has directory traversal via a direct request for a listing of an uploads directory such as the wp-content/uploads/2018/12 directory.
network
low complexity
consumer-reviews-script-project CWE-22
4.0