CVE-2020-29230: XSS

Published Dec 30, 2020

Updated

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the Full Name of the user. This vulnerability can result in the attacker injecting the XSS payload in the User Registration section and each time admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie according to the crafted payload.

Affected Software

1 affected component

EGavilanMedia User Registration and Login System With Admin Panel=1.0

Event History

Dec 30, 2020

CVE Published

via MITRE·06:18 PM

Data Sourced

via MITRE·06:18 PM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this issue?

The vulnerability ID for this issue is CVE-2020-29230.

What is the severity of CVE-2020-29230?

CVE-2020-29230 has a severity of 6.1 (Medium).

How does the vulnerability CVE-2020-29230 affect EGavilanMedia User Registration and Login System With Admin Panel 1.0?

CVE-2020-29230 affects EGavilanMedia User Registration and Login System With Admin Panel 1.0 by allowing cross-site scripting (XSS) attacks in the Admin Panel - Manage User tab using the Full Name of the user.

What is the impact of CVE-2020-29230?

The impact of CVE-2020-29230 is that it allows attackers to inject XSS payloads in the User Registration section, potentially compromising the security of the system.

How can I mitigate the vulnerability CVE-2020-29230?

To mitigate CVE-2020-29230, it is recommended to sanitize user input for the Full Name field in the Admin Panel - Manage User tab to prevent cross-site scripting attacks.