CVE-2020-35396

MEDIUM 6.1CVE-2020-35396 · Published 15/12/2020 · updated 17/06/2026

In short

CVE-2020-35396 is a MEDIUM (CVSS 6.1) vulnerability affecting barcodes generator (egavilanmedia).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
barcodes generator egavilanmedia	`= 1.0`	No fix yet

Description

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web application each time a user visits the website.

References

egavilanmedia.com · Vendor Advisory
nikhilkumar01.medium.com/cve-2020-35396-f4b5675fb168 · Exploit
exploit-db.com/exploits/49227 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free