CVE-2020-35395

MEDIUM

Expense Management System - 'description' Stored Cross Site Scripting

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-35395 has a selected CVSS score of 6.1 (medium); EIP currently links 1 catalogued exploit.

Description

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBExpense Management System - 'description' Stored Cross Site ScriptingExploitDB exploitby Nikhil KumarNot analyzed1 file
ExploitDB
PoC details

References

3