CVE-2020-36115

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.

CVSS v3.1

5.4 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.60% chance of exploitation in the next 30 days, 46th percentile

Published

2021-01-28

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/49484

References

• CVE Record
• NVD entry

Related

• CVE-2020-36112
• CVE-2020-36120
• CVE-2020-36109
• CVE-2020-36154
• CVE-2020-36084
• CVE-2020-36155