system
Describe <CVE-2020-35395>.
user
What is <CVE-2020-35395>?
assistant
XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field.