CVE-2020-23832

A Persistent Cross-Site Scripting (XSS) vulnerability in message_admin.php in Projectworlds Car Rental Management System v1.0 allows unauthenticated remote attackers to harvest an admin login session cookie and steal an admin session upon an admin login.

• CWE-79

• https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zipThird Party Advisory
• https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://projectworlds.inVendor Advisory
• https://github.com/projectworlds32/Car-Rental-Syatem-PHP-MYSQL/archive/master.zipThird Party Advisory
• https://packetstormsecurity.com/files/158795/Car-Rental-Management-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://projectworlds.inVendor Advisory

Published

Oct 6, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-23824ArGo Soft Mail Server 1.8.8.9 is affected by Cross Site Requ…8.8
• CVE-2020-23826The Yale WIPC-303W 2.21 through 2.31 camera is vulnerable to…8.8
• CVE-2020-23828A File Upload vulnerability in SourceCodester Online Course …9.8
• CVE-2020-23829interface/new/new_comprehensive_save.php in LibreHealth EHR …8.8
• CVE-2020-23830A Cross-Site Request Forgery (CSRF) vulnerability in changeU…7.1
• CVE-2020-23831A Reflected Cross-Site Scripting (XSS) vulnerability in the …6.1
• CVE-2020-23833Projectworlds House Rental v1.0 suffers from an unauthentica…9.8
• CVE-2020-23834Insecure Service File Permissions in the bd service in Real …7.8
• CVE-2020-23835A Reflected Cross-Site Scripting (XSS) vulnerability in the …6.1
• CVE-2020-23836A Cross-Site Request Forgery (CSRF) vulnerability in edit_us…8.8
• CVE-2020-23837A Cross-Site Request Forgery (CSRF) vulnerability in the Mul…8.8
• CVE-2020-23839A Reflected Cross-Site Scripting (XSS) vulnerability in GetS…6.1