CVE-2020-36115: XSS

Published Jan 28, 2021

Updated

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.

Affected Software

2 affected components

EGavilanMedia Phpcrud=1.0

Microsoft Windows

Event History

Jan 28, 2021

CVE Published

via MITRE·07:15 PM

Data Sourced

via MITRE·07:15 PM

Description

Frequently Asked Questions

What is CVE-2020-36115?

CVE-2020-36115 is a Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via the 'Add New Record Feature' using the First Name or Last Name parameter.

How does CVE-2020-36115 affect the software?

CVE-2020-36115 affects EGavilan Media CRUD Operation software version 1.0 using PHP, MySQL, Bootstrap, and Dompdf.

What is the severity of CVE-2020-36115?

CVE-2020-36115 has a severity rating of medium (5.4).

How can I fix CVE-2020-36115?

To fix CVE-2020-36115, it is recommended to implement proper input sanitization and output encoding techniques to prevent the injection of malicious scripts.

Where can I find more information about CVE-2020-36115?

You can find more information about CVE-2020-36115 at the following link: [CVE-2020-36115](https://www.exploit-db.com/exploits/49484).