Sourcecodester Online Event Booking and Reservation System HTML Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students and teachers. Sourcecodester Online Event Booking and Reservation System is vulnerable to HTML injection, which can be exploited by attackers to change the visibility of the website via the /event-management/index.php parameter of /event-management/index.php to change the visibility of the website.