CVE-2022-1102

SourceCodester Royale Event Management System 1.0 has a cross-site scripting vulnerability in /royal_event/companyprofile.php. The issue arises from manipulation of the parameters companyname, regno, companyaddress, or companyemail, leading to XSS. Exploitation can be remote. Multiple references ...

CVE-2022-1102 SourceCodester Royale Event Management System companyprofile.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royalevent/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. ...