CVE-2020-23835

CVSS 6.4 MEDIUMEPSS 2.3%

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.

CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/48813unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/boku7/tailorMS-rXSS-Keylogger https://www.exploit-db.com/exploits/48813