CVE-2020-26006: XSS

Published May 24, 2021

Updated

Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.

Affected Software

1 affected component

Online Examination System Project Online Examination System=1.0

Event History

May 24, 2021

CVE Published

via MITRE·12:41 PM

Data Sourced

via MITRE·12:41 PM

Description

Frequently Asked Questions

What is CVE-2020-26006?

CVE-2020-26006 is a vulnerability found in Project Worlds Online Examination System 1.0 that allows for Cross Site Scripting (XSS) attacks via account.php.

What is the severity of CVE-2020-26006?

CVE-2020-26006 has a severity keyword of 'medium' and a severity value of 6.1.

How does CVE-2020-26006 affect Online Examination System Project Online Examination System 1.0?

CVE-2020-26006 affects Online Examination System Project Online Examination System 1.0 by enabling Cross Site Scripting (XSS) attacks through account.php.

How can I fix the CVE-2020-26006 vulnerability?

To fix the CVE-2020-26006 vulnerability, ensure that all user-supplied input is properly sanitized and validated in the Online Examination System Project Online Examination System 1.0.

What is the Common Weakness Enumeration (CWE) for CVE-2020-26006?

The Common Weakness Enumeration (CWE) for CVE-2020-26006 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').