SourceCodester Wedding Hall Booking System Booking Form cross site scripting
CVE-2022-2690

3.5LOW

Key Information:

Vendor
Sourcecodester
Status
Wedding Hall Booking System
Vendor
CVE Published:
6 August 2022

Summary

A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknown functionality of the file /whbs/?page=my_bookings of the component Booking Form. The manipulation of the argument Remarks leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205813 was assigned to this vulnerability.

Affected Version(s)

Wedding Hall Booking System

References

https://github.com/Jamison2022/Wedding-Hall-Booking-Syste...
x_refsource_MISC
https://vuldb.com/?id.205813
x_refsource_MISC

CVSS V3.1

Score:
3.5
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.