medium6.4Public exploit code
CVE-2020-23835
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attack…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Tailor MS 1.0 - Reflected Cross-Site Scripting2020-09-15 · webapps · php
Impact
A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tailor Management System Project | Tailor Management System | Version 1.0 |