CVE-2022-2690

The CVE-2022-2690 issue affects SourceCodester Wedding Hall Booking System, specifically the /whbs/?page=my_bookings Booking Form. The known vulnerability is cross-site scripting triggered by manipulating the Remarks parameter in that function, with remote exploitation possible. Public disclosure...

CVE-2022-2692

CVE-2022-2692 affects SourceCodester Wedding Hall Booking System, specifically the Staff User Profile component at /whbs/admin/?page=user. The vulnerability arises from manipulation of the First Name/Last Name arguments, leading to cross-site scripting (XSS). It is possible to initiate the attack...

CVE-2022-2689

The CVE-2022-2689 entry concerns SourceCodester Wedding Hall Booking System. Affected is the Contact Page function handling the Message parameter in /whbs/?page=contact_us, where manipulation of Message enables a cross-site scripting (XSS) vulnerability. The issue can be exploited remotely, and t...

CVE-2022-2691

The vulnerability CVE-2022-2691 affects the SourceCodester Wedding Hall Booking System, specifically the Profile Page function at /whbs/?page=manage_account. The documented issue is a cross-site scripting (XSS) vulnerability caused by manipulation of unknown functionality within that page. It can...