PT-2020-17303
CVE-2020-35252
·
تاريخ النشر
2020-12-23
·
تاريخ التحديث
2020-12-23
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
User Registration & Login System with Admin Panel version 1.0
Description
The issue is related to a Cross Site Scripting (XSS) vulnerability. This vulnerability can be exploited via the
Full Name parameter in the User Registration section.Recommendations
For version 1.0, avoid using the
Full Name parameter in the User Registration section until the issue is resolved. As a temporary workaround, consider validating and sanitizing user input for the Full Name field to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾