Code injection

2020-12-1516:15:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.8%

JSON

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the ‘description’ field

CPENameOperatorVersion
expense_management_systemeq1.0

CPE	Name	Operator	Version
	expense_management_system	eq	1.0

References

nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c

www.exploit-db.com/exploits/49146