### [CVE-2018-14541](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-14541) ![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue) ![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen) ### Description PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields. ### POC #### Reference - https://gkaim.com/cve-2018-14541-vikas-chaudhary/ - https://gkaim.com/cve-2018-14541-vikas-chaudhary/ - https://www.exploit-db.com/exploits/45140/ - https://www.exploit-db.com/exploits/45140/ #### Github No PoCs found on GitHub currently.