CVE-2020-24609

Katalog CVE

CVSS 6.1 · Medium EPSS 9,8%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada techkshetrainfo savsoft quiz. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.

Rincian

Terbit di NVD

25 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

9,8% peluang dieksploitasi; lebih tinggi dari 95,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/48753 advisory pihak ketiga · vdb entry
• https://www.exploit-db.com/exploits/48785 advisory pihak ketiga · vdb entry