PT-2021-11211 · Unknown · The Online Marriage Registration System

That Faceless Coder · Published 2021-02-08 · Updated 2023-11-14 · CVE-2020-26052

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Online Marriage Registration System version 1.0

Description: The issue is related to stored cross-site scripting (XSS) vulnerabilities in multiple parameters. This means that an attacker can inject malicious scripts into the system, which are then stored and executed when other users access the affected parameters.

Recommendations: For Online Marriage Registration System version 1.0, consider restricting access to the vulnerable parameters to minimize the risk of exploitation. As a temporary workaround, avoid using parameters that may be vulnerable to XSS attacks until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-26052

Affected Products

The Online Marriage Registration System

References · 5

• https://osv.dev/vulnerability/CVE-2020-26052 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26052 · Security Note
• https://exploit-db.com/exploits/48522 · Note
• https://t.me/cibsecurity/23205 · Telegram Post
• https://t.me/cvenotify/9574 · Telegram Post