CVE-2020-23466

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/Product
https://www.exploit-db.com/exploits/48522Exploit, Third Party Advisory, VDB Entry
https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/Product
https://www.exploit-db.com/exploits/48522Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Aug 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-234697.5gmate v0.12+bionic contains a regular expression denial of service (ReDoS) vulnerability in the gedit3 plugin.CVE-2020-234787.5Leo Editor v6.2.1 was discovered to contain a regular expression denial of service (ReDoS) vulnerability in the component plugins/importers/CVE-2020-234815.4CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web CVE-2020-234898.8The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php CVE-2020-234907.5There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue CVE-2020-235129.8VR CAM P1 Model P1 v1 has an incorrect access control vulnerability where an attacker can obtain complete access of the device from web (rem CVE-2020-235176.1Cross Site Scripting (XSS) vulnerability in Aryanic HighMail (High CMS) versions 2020 and before allows remote attackers to inject arbitrary CVE-2020-235185.4Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows CVE-2020-235207.2imcat 5.2 allows an authenticated file upload and consequently remote code execution via the picture functionality.CVE-2020-235226.8Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.CVE-2020-235337.5Union Pay up to 1.2.0, for web based versions contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability, allows att CVE-2020-235349.8A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.