Lucene search

[email protected]CVE-2020-27515

HistoryDec 26, 2020 - 2:15 a.m.

CVE-2020-27515

2020-12-2602:15:12

CWE-79

[email protected]

web.nvd.nist.gov

cve-2020-27515

cross site scripting

xss

savsoft quiz v5.0

remote attack

web script

html

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.009 Low

EPSS

Percentile

82.8%

JSON

A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field.

Affected configurations

NVD

Node

techkshetrainfosavsoft_quizMatch5.0

CPENameOperatorVersion
techkshetrainfo:savsoft_quiztechkshetrainfo savsoft quizeq5.0

CPE	Name	Operator	Version
techkshetrainfo:savsoft_quiz	techkshetrainfo savsoft quiz	eq	5.0

References

github.com/savsofts/savsoftquiz_v5

savsoftquiz.com/

www.exploit-db.com/exploits/49208

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.009 Low

EPSS

Percentile

82.8%

JSON

Related for CVE-2020-27515

cvelist1 prion1 nvd1