Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2020-35396

Description

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.

POC

Reference

- https://nikhilkumar01.medium.com/cve-2020-35396-f4b5675fb168

- https://www.exploit-db.com/exploits/49227

Github

- https://github.com/zhanpengliu-tencent/medium-cve