CVE-2022-46089

The Online Flight Booking Management System version 1.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability in the add-airline form. The root cause is the improper neutralization of input during web page generation, specifically allowing a crafted payload to be injected into the airline p...

CVE-2022-46091

The Online Flight Booking Management System v1.0 is vulnerable to a Cross Site Scripting (XSS) flaw in its feedback form. The root cause is the improper neutralization of input, which allows an attacker to inject a crafted payload into the airline parameter to execute arbitrary web scripts or HTM...

CVE-2022-46088

CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...