CVE-2020-23832
A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.
Date published : 2020-10-06
https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zip