CVE-2020-23832

Published: 2020-10-06T13:15Z

Last Modified: 2024-11-21T05:14Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt