CVE-2020-36552

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Made field to /dashboard/menu-list.php.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0Exploit, Third Party Advisory
https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49135Exploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.htmlProduct
https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0Exploit, Third Party Advisory
https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
https://www.exploit-db.com/exploits/49135Exploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.htmlProduct

Timeline

Published: Jul 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-365535.4Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Area(food_type) field to /d CVE-2020-365575.1A race condition in the Linux kernel before 5.6.2 between the VT_DISALLOCATE ioctl and closing/opening of ttys could lead to a use-after-fre CVE-2020-365585.1A race condition in the Linux kernel before 5.5.7 involving VT_RESIZEX could lead to a NULL pointer dereference and general protection fault CVE-2020-365597.5Due to improper sanitization of user input, HTTPEngine.Handle allows for directory traversal, allowing an attacker to read files outside of CVE-2020-36567.8Out of bound access can happen in MHI command process due to lack of check of command channel id value received from MHI devices in Snapdrag CVE-2020-365609.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar CVE-2020-365619.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar CVE-2020-365627.5Due to unchecked type assertions, maliciously crafted messages can cause panics, which may be used as a denial of service vector.CVE-2020-365635.3XML Digital Signatures generated and validated using this package use SHA-1, which may allow an attacker to craft inputs which cause hash co CVE-2020-365647.5Due to improper validation of caller input, validation is silently disabled if the provided expected token is malformed, causing any user su CVE-2020-365655.3Due to improper sanitization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read CVE-2020-365669.1Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the tar