CVE-2023-31942

Cross Site Scripting vulnerability found in Online Travel Agency System v.1.0 allows a remote attacker to execute arbitrary code via the description parameter in insert.php...

CVE-2023-31942

CVE-2023-31942 describes a Cross Site Scripting (XSS) vulnerability affecting Online Travel Agency System v1.0. An attacker can inject a payload via the description parameter in insert.php to execute arbitrary web scripts/HTML in a victim’s browser. The connected sources consistently cite this ve...