CVE:CVE-2018-15183
CNNVD:CNNVD-201808-269
PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script是印度PHP Scripts Mall公司的一套在线简历生成网站脚本。
PHP Scripts Mall Myperfectresume/JobHero/Resume Clone Script 2.0.6版本中存在跨站脚本漏洞。远程攻击者可借助Full Name和Title字段利用该漏洞向Web页面中注入恶意的脚本并在用户浏览器中执行该脚本。
solution:Upgrade myperfectresume_/_jobhero_/_resume_clone_script_project myperfectresume_/_jobhero_/_resume_clone_script to a higher version than 2.0.6,and avoid the version 2.0.6