Record summary

CVE-2020-36115 has a selected CVSS score of 5.4 (medium); EIP currently links 1 catalogued exploit.

Description

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBEgavilanMedia PHPCRUD 1.0 - 'Full Name' Stored Cross Site ScriptingExploitDB exploitby Mahendra PurbiaNot analyzed1 file
ExploitDB

PoC details

References

2