PT-2025-5879 · Unknown · Egavilan Media Resumes Management/Job Application Website

Kshitiz Raj + 1 · Published 2025-02-06 · Updated 2025-02-06 · CVE-2020-36085

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Egavilan Media Resumes Management and Job Application Website version 1.0

Description The issue allows remote attackers to inject arbitrary code via the First and Last Name fields in the Apply For This Job Form. This is a Stored Cross Site Scripting (XSS) issue.

Recommendations For Egavilan Media Resumes Management and Job Application Website version 1.0, consider validating and sanitizing user input for the First and Last Name fields in the Apply For This Job Form to prevent code injection. As a temporary workaround, restrict access to the Apply For This Job Form until a patch is available.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-36085

Affected Products

Egavilan Media Resumes Management/Job Application Website

References · 4

• 🔥 https://github.com/manitorpotterk/CVE/blob/main/Egavilan%20Media%20XSS.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36085 · Security Note
• https://twitter.com/CVEnew/status/1887619861041516829 · Twitter Post
• https://t.me/cvedetector/17440 · Telegram Post