Medium severity4.8NVD Advisory· Published Jan 26, 2021· Updated Jun 17, 2026

CVE-2020-29241

Description

Online News Portal using PHP/MySQLi 1.0 is affected by cross-site scripting (XSS) which allows remote attackers to inject an arbitrary web script or HTML via the "Title" parameter.

Affected products

Online News Portal Project/Online News Portal
cpe:2.3:a:online_news_portal_project:online_news_portal:1.0:*:*:*:*:*:*:*
Online News Portal/Online News Portaldescription
Online Job Portal/Online Job Portalllm-fuzzy
Range: <=1.0

Patches

Vulnerability mechanics

References

medium.com/%40parshwa.fabaf/cross-site-scripting-vulnerability-in-admin-panel-c95bd4ecb6aanvd

News mentions

No linked articles in our index yet.

cvss	0.312
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000