CVE-2020-24609
TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.
Published:Aug 25, 2020
Last Modified:Nov 21, 2024
EPS:Aug 25, 2020
EPSS Score:0.16232
CVSS Score:6.1
Affected Products
Vendor
Product
Action
Vendor
Techkshetrainfo
Product
Savsoft Quiz
Techkshetrainfo
Savsoft Quiz
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
