CVE-2023-49270 — Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

CVE-2023-49270

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_in_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.

Affected (CNA)

Vendor / product	Versions
Kashipara Group / Hotel Management	affected 1.0

CWE

CWE-79

References

https://fluidattacks.com/advisories/lang/
https://www.kashipara.com/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/lang/
https://www.kashipara.com/

CISA-ADP

No English description supplied.

No references supplied.