Back to search
CVE-2020-23835
Published: Sep 1, 2020
Modified: Aug 4, 2024
PUBLISHED
CVSS v3.1
6.4
MEDIUM
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AC:H/AV:N/A:L/C:H/I:L/PR:N/S:U/UI:R
Attack Complexity
High
Attack Vector
Network
Availability
Low
Confidentiality
High
Integrity
Low
Privileges Required
None
Scope
Unchanged
User Interaction
Required
References
https://github.com/boku7/tailorMS-rXSS-Keylogger
x_refsource_MISC
48813
exploit
x_refsource_EXPLOIT-DB
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now