Published: 05/11/2021 Updated: 17/11/2021

CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8

CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3

VMScore: 312

Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.

Vulnerable Product	Search on Vulmon	Subscribe to Product
online event booking and reservation system project online event booking and reservation system 2.3.0

CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system.

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 230 Technical description: A stored XSS vulnerability exists in the Event management software version 230 An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie steal

CVE-2021-42663 - HTML Injection vulnerability in the Online event booking and reservation system.

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 230 Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 230 An attacker can leverage this vulnerability in order to change the visibility of the website Once the target user clicks on a

CVE-2021-42663 - HTML Injection vulnerability in the Online event booking and reservation system.

CVE-2021-42663 CVE-2021-42662 - HTML Injection vulnerability in the Online event booking and reservation system version 230 Technical description: A HTML injection vulnerability exists in the Online Event Booking and Reservation System version 230 An attacker can leverage this vulnerability in order to change the visibility of the website Once the target user clicks on a

CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system.

CVE-2021-42662 CVE-2021-42662 - Stored Cross-Site Scripting vulnerability in the Online event booking and reservation system version 230 Technical description: A stored XSS vulnerability exists in the Event management software version 230 An attacker can leverage this vulnerability in order to run javascript on the web server surfers behalf, which can lead to cookie steal

CWE-79 https://github.com/TheHackingRabbi/CVE-2021-42662 https://www.exploit-db.com/exploits/50450 https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html https://nvd.nist.gov https://github.com/0xDeku/CVE-2021-42662

CVE-2021-42662

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect