CVE-2020-29205: XSS
Published May 17, 2021
·Updated
XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field
Affected Software
1 affected component
Projectworlds Travel management System=1.0
Event History
May 17, 2021
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is CVE-2020-29205?
CVE-2020-29205 is a vulnerability that allows a remote attacker to inject arbitrary code via the name field in the signup form of Project Worlds Online Examination System 1.0.
2
How severe is CVE-2020-29205?
CVE-2020-29205 has a severity score of 6.1 (Medium).
3
How can the XSS vulnerability in CVE-2020-29205 be exploited?
The XSS vulnerability in CVE-2020-29205 can be exploited by a remote attacker by injecting arbitrary code via the name field in the signup form.
4
What software is affected by CVE-2020-29205?
Project Worlds Online Examination System 1.0 is affected by CVE-2020-29205.
5
Is there a fix available for CVE-2020-29205?
To fix CVE-2020-29205, it is recommended to update to a patched version of Project Worlds Online Examination System.