CVE-2020-29231

MediumCVSS 5.4

Published: 30/12/2020(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.59%

44th percentile - higher than 44% of all known CVEs

Summary

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is vulnerable to cross-site scripting (XSS) in the Admin Profile Page. An attacker can inject a malicious JavaScript payload into the 'Admin Full Name' field, which triggers every time the admin visits the profile page.

Risk Assessment

The risk includes session hijacking, data theft, or unauthorized actions within the admin panel. This could lead to full system compromise.

Recommendation

Immediately update the system to the latest version or apply a patch that fixes the XSS vulnerability. Additionally, implement input validation and output encoding for all form fields.

Original NVD description (English source)

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulnerability can result in the attacker injecting the XSS payload in Admin Full Name and each time admin visits the Profile page from the admin panel, the XSS triggers.