Vulnerability record · CVE-2020-24609 · published 25 August 2020
CVE-2020-24609: Techkshetrainfo savsoft quiz cross-site scripting vulnerability
Techkshetrainfo · Savsoft Quiz
TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.
Description
TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Affected products
1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.
References
| Link | Tags |
|---|---|
| https://www.exploit-db.com/exploits/48753 | Third Party AdvisoryVDB Entry |
| https://www.exploit-db.com/exploits/48785 | Third Party AdvisoryVDB Entry |
| https://www.exploit-db.com/exploits/48753 | Third Party AdvisoryVDB Entry |
| https://www.exploit-db.com/exploits/48785 | Third Party AdvisoryVDB Entry |
Track CVE-2020-24609 inside VULONE
Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.
Related vulnerabilities
Same products first, then exploited flaws of the same weakness class.
Source: NIST National Vulnerability Database (record CVE-2020-24609), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.
