CVE-2020-29205

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/projectworldsofficial/online-examination-systen-in-phpThird Party Advisory
https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156Third Party Advisory
https://www.exploit-db.com/exploits/48969Exploit, Third Party Advisory, VDB Entry
https://github.com/projectworldsofficial/online-examination-systen-in-phpThird Party Advisory
https://nikhilkumar01.medium.com/cve-2020-29205-a7ab5cbcd156Third Party Advisory
https://www.exploit-db.com/exploits/48969Exploit, Third Party Advisory, VDB Entry

Timeline

Published: May 17, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-29214.4Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affecte CVE-2020-292149.8SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authenticatio CVE-2020-292155.4A Cross Site Scripting in SourceCodester Employee Management System 1.0 allows the user to execute alert messages via /Employee Management S CVE-2020-29223.7Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7 CVE-2020-292279.8An issue was discovered in Car Rental Management System 1.0. An unauthenticated user can perform a file inclusion attack against the /index.CVE-2020-292287.5EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.CVE-2020-29234.9Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 an CVE-2020-292306.1EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage CVE-2020-292315.4EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. T CVE-2020-292335.4WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inj CVE-2020-292387.5An integer buffer overflow in the Nginx webserver of ExpressVPN Router version 1 allows remote attackers to obtain sensitive information whe CVE-2020-292396.1Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result in an attacker inject