Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-25761
HistorySep 30, 2020 - 6:15 p.m.

Input validation

2020-09-3018:15:00
PRIOn knowledge base
www.prio-n.com
4

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc.

CPENameOperatorVersion
visitor_management_system_in_phpeq1.0

6.2 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

75.0%

Related for PRION:CVE-2020-25761