Security Advisory
CVE-2020-23832
6.1
MEDIUM
Vulnerability Description
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Published Date
October 6, 2020
Official Source
NIST NVD Advisory