CVE-2020-35752
MEDIUMBaby Care System 1.0 - Stored Cross-Site Scripting via Post Title Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2020-35752. PoCs published by Hardik Solanki.
AI-analyzed exploit summary This exploit demonstrates a stored XSS vulnerability in Baby Care System 1.0, where an attacker can inject malicious JavaScript into the 'Post title' parameter. The payload executes when other users view the post, potentially stealing cookies.
Description
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
Exploits (1)
This exploit demonstrates a stored XSS vulnerability in Baby Care System 1.0, where an attacker can inject malicious JavaScript into the 'Post title' parameter. The payload executes when other users view the post, potentially stealing cookies.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N