CVE-2020-10107: XSS

Published Mar 5, 2020

Updated

PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS, as demonstrated by the ExpenseItem or ExpenseCost parameter in manage-expense.php.

Affected Software

1 affected component

Phpgurukul Daily Expense Tracker System=1.0

Event History

Mar 5, 2020

CVE Published

via MITRE·12:43 PM

Data Sourced

via MITRE·12:43 PM

Description

Frequently Asked Questions

What is CVE-2020-10107?

CVE-2020-10107 is a vulnerability in PHPGurukul Daily Expense Tracker System 1.0 that allows for stored cross-site scripting (XSS) attacks.

How does CVE-2020-10107 affect PHPGurukul Daily Expense Tracker System 1.0?

CVE-2020-10107 allows an attacker to perform stored XSS attacks through the ExpenseItem or ExpenseCost parameter in the manage-expense.php file.

What is the severity of CVE-2020-10107?

CVE-2020-10107 has a severity rating of medium with a CVSS score of 5.4.

How can I fix CVE-2020-10107 vulnerability in PHPGurukul Daily Expense Tracker System 1.0?

To fix the CVE-2020-10107 vulnerability, update PHPGurukul Daily Expense Tracker System to a version that addresses the XSS vulnerability and sanitize user input in the manage-expense.php file to prevent stored XSS attacks.

Where can I find more information about CVE-2020-10107?

You can find more information about CVE-2020-10107 at https://frostylabs.net/writeups/cve-2020-10107/.