3 matches found
CVE-2022-46091
CVE-2022-46091 affects Online Flight Booking Management System v1.0, with a Cross Site Scripting (XSS) flaw in the feedback form. The vulnerability arises from a crafted payload injected into the airline parameter, enabling execution of arbitrary client-side scripts/HTML. Connected sources confir...
CVE-2022-46089
CVE-2022-46089 is a Cross Site Scripting (XSS) vulnerability in the Online Flight Booking Management System v1.0, specifically in the add-airline form where an attacker can inject a payload via the airline parameter to execute arbitrary client-side scripts. The common details across connected doc...
CVE-2022-46088
CVE-2022-46088 affects Online Flight Booking Management System v1.0. Multiple connected sources report a cross-site scripting (XSS) vulnerability via the feedback form, caused by improper handling of user-supplied input. The descriptions consistently identify the feedback form as the entry point ...