nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2020-36115 CVE-2020-36115
MEDIUM
EgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site Scripting
Record summary
CVE-2020-36115 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.
Description
Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBEgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site ScriptingExploitDB exploitby Mahendra PurbiaNot analyzed1 file
References
2exploit-db.com
https://www.exploit-db.com/exploits/49484