CVE-2022-2292 SourceCodester Hotel Management System Room Edit Page 1 cross site scripting
MediumCVSS 5.4
EPSS 0.59%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability classified as problematic has been found in SourceCodester Hotel Management System 2.0. Affected is an unknown function of the file /ci_hms/massage_room/edit/1 of the component Room Edit Page. The manipulation of the argument massageroomDetails with the input "><script>alert("XSS")</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sourcecodester Hotel Management System | = 2.0 | No fix listed |
| hotel management system project hotel management system | = 2.0 | No fix listed |
References
- github.com
- vuldb.com exploit third-party-advisory