Cross site scripting

2023-09-2520:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

vulnerability

remote attacker

arbitrary code

sensitive information

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.3%

JSON

Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage_room function.

CPENameOperatorVersion
resort_reservation_systemeq1.0

CPE	Name	Operator	Version
	resort_reservation_system	eq	1.0

References

samh4cks.github.io/posts/cve-2023-43458/

www.sourcecodester.com/php/16447/resort-reservation-system-php-and-sqlite3-source-code-free-download.html