CVE-2020-29239

Online Birth Certificate System Project V 1.0 is affected by cross-site scripting (XSS). This vulnerability can result in an attacker injecting the XSS payload in the User Registration section. When an admin visits the View Detail of Application section from the admin panel, the attacker can able to steal the cookie according to the crafted payload.

• CWE-79

• https://www.exploit-db.com/exploits/49159Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/49159Third Party Advisory, VDB Entry

Published

Dec 2, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-29228EGavilanMedia User Registration and Login System With Admin …7.5
• CVE-2020-2923Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2020-29230EGavilanMedia User Registration and Login System With Admin …6.1
• CVE-2020-29231EGavilanMedia User Registration and Login System With Admin …5.4
• CVE-2020-29233WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in…5.4
• CVE-2020-29238An integer buffer overflow in the Nginx webserver of Express…7.5
• CVE-2020-2924Vulnerability in the MySQL Server product of Oracle MySQL (c…4.9
• CVE-2020-29240Lepton-CMS 4.7.0 is affected by cross-site scripting (XSS). …4.8
• CVE-2020-29241Online News Portal using PHP/MySQLi 1.0 is affected by cross…4.8
• CVE-2020-29242dhowden tag before 2020-11-19 allows "panic: runtime error: …6.5
• CVE-2020-29243dhowden tag before 2020-11-19 allows "panic: runtime error: …6.5
• CVE-2020-29244dhowden tag before 2020-11-19 allows "panic: runtime error: …6.5