← Back to CVE List
CVE-2020-35395
XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field
> MITRE Terms of Use apply – see LICENSE‑MITRE.txt