CVE-2020-35395

6.1 mediumEPSS 0.9%

Medium (6.1) in egavilanmedia expense management system. EPSS 0.9% chance of exploitation in the next 30 days.

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 58% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2020-12-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

egavilanmedia:expense_management_system

References

https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c
https://www.exploit-db.com/exploits/49146
https://nikhilkumar01.medium.com/cve-2020-35395-cd393ac8371c
https://www.exploit-db.com/exploits/49146

Check your stack JSON