Medium severity · published Aug 19, 2022
CVE-2020-23466
Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field
5.4
CVSS
0.6%
EPSS
No
On KEV
Description
Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 50% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OM
Online Marriage Registration System · Phpgurukul
1.0 · source: NVD
Affected product
OM
Online Marriage Registration System
Phpgurukul
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-23466
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-23466
Product
https://phpgurukul.com/online-marriage-registration-system-using-php-and-mysql/
Exploit
https://www.exploit-db.com/exploits/48522
More from Online Marriage Registration System
9.8
CVE-2025-4927
PHPGurukul Online Marriage Registration System between-dates-application-report.php sql injection
9.8
CVE-2024-50989
A SQL injection vulnerability in /omrs/admin/search.php in PHPGurukul Online Marriage Registration System v1.0 allows an attacker to execute arbitrary SQL commands via the…
8.8
CVE-2020-35151
The Online Marriage Registration System 1.0 post parameter "searchdata" in the user/search.php request is vulnerable to Time Based Sql Injection
6.1
CVE-2024-50990
A Reflected Cross Site Scriptng (XSS) vulnerability was found in /omrs/user/search.php in PHPGurukul Online Marriage Registration System v1.0, which allows remote attackers to…
5.4
CVE-2020-26052
Online Marriage Registration System 1.0 is affected by stored cross-site scripting (XSS) vulnerabilities in multiple parameters