CVE-2020-29239

6.1 mediumEPSS 0.5%

Medium (6.1) in janobe online voting system. EPSS 0.5% chance of exploitation in the next 30 days.

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able to steal the cookie according to the crafted payload.

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 39% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-12-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

janobe:online_voting_system

References

https://www.exploit-db.com/exploits/49159
https://www.exploit-db.com/exploits/49159

Check your stack JSON