PT-2020-17128
CVE-2020-29259
·
تاريخ النشر
2020-12-09
·
تاريخ التحديث
2022-04-12
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Online Examination System version 1.0
Description
The issue is a cross-site scripting (XSS) vulnerability. It can be exploited via the
subject or feedback parameter to the "feedback.php" endpoint. This allows for potential malicious script injection.Recommendations
For Online Examination System version 1.0, as a temporary workaround, consider restricting access to the "feedback.php" endpoint or sanitizing the
subject and feedback parameters to prevent XSS attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾