VULNERABILITY INTELLIGENCE

CVE-2020-29231

CVSS score5.4 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2020-12-30
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the XSS triggers.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references