Lucene search
MitreCVELIST:CVE-2020-25761HistorySep 29, 2020 - 7:06 p.m.
CVE-2020-25761
2020-09-2919:06:00
mitre
www.cve.org
4
projectworlds visitor management system
php
xss
input validation
javascript payloads
stealing cookies
sensitive information
EPSS
0.008
Percentile
81.8%
Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc.
Related
nvd
nvd
CVE-2020-25761
2020-09-30 18:15:25
prion
prion
Input validation
2020-09-30 18:15:00
packetstorm
packetstorm
Visitor Management System In PHP 1.0 Cross Site Scripting
2020-09-22 00:00:00
cve
cve
CVE-2020-25761
2020-09-30 18:15:25