CVE-2020-29257: XSS
Published Dec 9, 2020
·Updated
Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php.
Affected Software
1 affected component
Online Examination System Project Online Examination System=1.0
Event History
Dec 9, 2020
CVE Published
via MITRE·10:18 PM
Data Sourced
via MITRE·10:18 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-29257?
The severity of CVE-2020-29257 is medium with a severity value of 6.1.
2
How does CVE-2020-29257 affect Online Examination System 1.0?
CVE-2020-29257 affects Online Examination System 1.0 through a cross-site scripting (XSS) vulnerability in the q parameter of the feedback.php file.
3
What is cross-site scripting (XSS) vulnerability?
Cross-site scripting (XSS) vulnerability is a security vulnerability that allows attackers to inject malicious scripts into web pages viewed by other users.
4
What is the Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) identifier for this vulnerability is CVE-2020-29257.
5
How can I fix the CVE-2020-29257 vulnerability?
To fix the CVE-2020-29257 vulnerability, it is recommended to sanitize the input in the q parameter of the feedback.php file to prevent XSS attacks.