CVE-2020-28927 | BDVDB-2026-145104 Detail

Description#

There is a Stored XSS in Magicpin v2.1 in the User Registration section. Each time an admin visits the manage user section from the admin panel, the XSS triggers and the attacker can able to steal the cookie according to the crafted payload.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://magicpin.in
https://akshayj0111.medium.com/cve-2020-28927-6f64c25239bb

Exploit#

No public exploit known

History#

Version 12020-11-23Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.