CVE-2018-6867by Jeremyin Security Bulletinson Posted on February 23, 2018 Cross Site Scripting (XSS) exists in PHP Scripts Mall Alibaba Clone Script 1.0.2 via a profile parameter.