CVE-2020-25761

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Sep 30, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-257629.1An issue was discovered in SourceCodester Seat Reservation System 1.0. The file admin_class.php does not perform input validation on the useCVE-2020-257639.8Seat Reservation System version 1.0 suffers from an Unauthenticated File Upload Vulnerability allowing Remote Attackers to gain Remote Code CVE-2020-257659.8Addressed remote code execution vulnerability in reg_device.php due to insufficient validation of user input.in Western Digital My Cloud DevCVE-2020-257667.5An issue was discovered in MISP before 2.4.132. It can perform an unwanted action because of a POST operation on a form that is not linked tCVE-2020-257677.5An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a dCVE-2020-257685.3Contao before 4.4.52, 4.9.x before 4.9.6, and 4.10.x before 4.10.1 have Improper Input Validation. It is possible to inject insert tags in fCVE-2020-25774.9Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.28 and prior andCVE-2020-257705.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive informCVE-2020-257715.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive informCVE-2020-257725.5An out-of-bounds read information disclosure vulnerabilities in Trend Micro Apex One may allow a local attacker to disclose sensitive informCVE-2020-257737.8A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to execute arbitrary code on affected prodCVE-2020-257744.3A vulnerability in the Trend Micro Apex One ServerMigrationTool component could allow an attacker to trigger an out-of-bounds red informatio