CVE-2018-6903

8.8 highEPSS 1.0%

High (8.8) in hot scripts clone project hot scripts clone. EPSS 1.0% chance of exploitation in the next 30 days.

PHP Scripts Mall Hot Scripts Clone Script Classified v3.1 uses the client side to enforce validation of an e-mail address, which allows remote attackers to modify a registered e-mail address by removing the validation code.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 63% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

hot_scripts_clone_project:hot_scripts_clone

References

https://0day4u.wordpress.com/2018/03/12/hot-scripts-clone-script-classified-improper-validation-of-email-address/
https://0day4u.wordpress.com/2018/03/12/hot-scripts-clone-script-classified-improper-validation-of-email-address/

Check your stack JSON