CVE-2023-49270 Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'checkindate' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response...

CVE-2023-49270

Affected product/versions: Hotel Management v1.0. Vulnerability type: Authenticated Reflected Cross-Site Scripting (XSS). The vulnerability arises because the check_in_date parameter in reservation.php is echoed into the HTML response as plain text between tags, allowing injection of arbitrary HT...