Stored Cross Site Scripting Vulnerability in Sourcecodester Online Event Booking System
CVE-2021-42662

5.4MEDIUM

Key Information:

Vendor: Online Event Booking And Reservation System Project
Status: Online Event Booking And Reservation System
Vendor: CVE Published:; 5 November 2021

🔔 Create Online Event Booking And Reservation System Project Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2021-42662?

A Stored Cross Site Scripting (XSS) vulnerability is present in the Sourcecodester Online Event Booking and Reservation System built on PHP/MySQL. This vulnerability is activated through the 'Holiday reason' parameter, allowing attackers to inject malicious JavaScript code. If successfully exploited, an attacker could execute scripts in users' browsers, potentially leading to serious consequences such as stealing cookies or sensitive information without the users' knowledge. It is crucial for developers and administrators to implement proper input validation and sanitization measures to mitigate risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2021-42662
Created by 0xDeku