CVE-2020-35395: XSS
Published Dec 15, 2020
·Updated
XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field
Affected Software
1 affected component
EGavilanMedia Expense Management System=1.0
Event History
Dec 15, 2020
CVE Published
via MITRE·03:38 PM
Data Sourced
via MITRE·03:38 PM
Description
Frequently Asked Questions
1
What is CVE-2020-35395?
CVE-2020-35395 is a Cross-Site Scripting (XSS) vulnerability in the Add Expense Component of EGavilan Media Expense Management System 1.0.
2
How can an attacker exploit CVE-2020-35395?
An attacker can exploit CVE-2020-35395 by injecting malicious JavaScript code into the 'description' field of the Add Expense Component.
3
What is the severity of CVE-2020-35395?
CVE-2020-35395 has a severity level of medium with a CVSSv3 score of 6.1.
4
What is the affected software of CVE-2020-35395?
The affected software is EGavilan Media Expense Management System 1.0.
5
How can I fix CVE-2020-35395?
To fix CVE-2020-35395, it is recommended to sanitize and validate user inputs to prevent the injection of malicious JavaScript code.