CVE Vulnerability

CVE-2020-24609

TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.

4.3 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://www.exploit-db.com/exploits/48753 Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/48785 Third Party Advisory VDB Entry
Configurations

Configuration 1

cpe:2.3:a:techkshetrainfo:savsoft_quiz:*:*:*:*:*:*:*:*
Information

Published : 2020-08-25 03:15

Updated : 2022-11-21 01:52

NVD link : CVE-2020-24609

Mitre link : CVE-2020-24609

Products Affected
No products.
CWE
CWE-79