Medium severity6.4NVD Advisory· Published Sep 1, 2020· Updated Jun 17, 2026

CVE-2020-23835

Description

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who clicks on a malicious URL and begins typing.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Tailor Management System Project/Tailor Management System
cpe:2.3:a:tailor_management_system_project:tailor_management_system:1.0:*:*:*:*:*:*:*
SourceCodester/Tailor Management Systemdescription
Sourcecodester/Tailor Management Systemllm-create
Range: = 1.0
Boku7/tailorMS-rXSS-Keyloggerllm-create

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48813nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.416
epss	0.002
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000