Reflected Cross-Site Scripting in MRBS by Meeting Room Booking System

CVE-2026-124474

What is CVE-2026-124474?

The Meeting Room Booking System (MRBS) prior to version 1.12.3 is susceptible to a reflected cross-site scripting (XSS) vulnerability. This flaw allows unauthenticated attackers to craft malicious links that, when accessed by logged-in users, could result in the execution of arbitrary scripts. Through this vulnerability, attackers can potentially gain access to CSRF tokens, alter booking entries, and execute unauthorized administrative commands. It is crucial for users of MRBS to update to version 1.12.3 or later to mitigate these risks.

References