CVE-2018-6900by Jeremyin Security Bulletinson Posted on April 15, 2018 PHP Scripts Mall Website Broker Script 3.0.6 has XSS via the Last Name field on the My Profile page.