Destoon Destoon B2b — known CVE vulnerabilities

Every CVE whose affected-product data names Destoon Destoon B2b, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2018-18432 — CVSS 8.8 (high): An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.
• CVE-2018-18430 — CVSS 4.8 (medium): An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.
• CVE-2018-18431 — CVSS 4.8 (medium): An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.
• CVE-2018-18433 — CVSS 4.8 (medium): An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.