Vulnerabilities > PHP Multivendor Ecommerce Project > PHP Multivendor Ecommerce > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-12-28 | CVE-2017-17958 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the my_wishlist.php fid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17956 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the admin/sellerupd.php companyname parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17955 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the shopping-cart.php cusid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17954 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the seller-view.php usid parameter. | 6.1 |
| 2017-12-28 | CVE-2017-17953 | Cross-site Scripting vulnerability in PHP Multivendor Ecommerce Project PHP Multivendor Ecommerce PHP Scripts Mall PHP Multivendor Ecommerce has XSS via the category.php chid1 parameter. | 6.1 |