CVE-2020-28071

MEDIUM 4.8CVE-2020-28071 · Published 23/12/2020 · updated 17/06/2026

In short

CVE-2020-28071 is a MEDIUM (CVSS 4.8) vulnerability affecting alumni management system (alumni management system project).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 55.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
alumni management system alumni_management_system_project	`= 1.0`	No fix yet

Description

SourceCodester Alumni Management System 1.0 is affected by cross-site Scripting (XSS) in /admin/gallery.php. After the admin authentication an attacker can upload an image in the gallery using a XSS payload in the description textarea called 'about' and reach a stored XSS.

References

packetstormsecurity.com/files/160591/Alumni-Management-System-1.0-Cross-Site-Scripting.html · Exploit

More vulnerabilities in alumni management system

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

alumni management system

alumni_management_system_project

= 1.0

No fix yet

More vulnerabilities in alumni management system

See all →