CVE-2020-23466 — Cross-site Scripting in Online Marriage Registration System

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.2%
top 58.20%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Phpgurukul Online Marriage Registration System
Timeline
PublishedAug 19
Latest updateAug 20

Description

Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3cm9-v6qr-gccc: Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1↗2022-08-20
▶
CVEList
CVE-2020-23466: Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1↗2022-08-19
▶
CVE-2020-23466 — Cross-site Scripting | cvebase