CVE-2023-2692

SourceCodester ICT Laboratory Management System 1.0 contains a cross-site scripting vulnerability in views/room_info.php (GET Parameter Handler). Manipulating the name parameter leads to XSS. The issue can be exploited remotely and has public exploits; identifier VDB-228973 is assigned. Multiple ...