Cross-Site Scripting Vulnerability in EGavilanMedia User Registration and Login System
CVE-2020-29231

5.4MEDIUM

Key Information:

Vendor

Egavilanmedia

Status
User Registration And Login System With Admin Panel
Vendor
CVE Published:
30 December 2020

What is CVE-2020-29231?

The User Registration and Login System by EGavilanMedia is susceptible to cross-site scripting due to improper handling of user input on the Admin Profile Page. This flaw allows attackers to inject malicious scripts into the Admin Full Name field. When an administrator accesses the profile page, the injected script is executed, potentially compromising the admin panel and allowing unauthorized actions within the system.

References

http://egavilanmedia.com
x_refsource_MISC
https://github.com/hemantsolo/CVE-Reference/blob/main/CVE...
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.