CVEvulnerability
CVE-2021-42662
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-11-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.4 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.
Affected configurations
• online event booking and reservation system project online event booking and reservation system 2.3.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/TheHackingRabbi/CVE-2021-42662 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50450 Exploit, Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html Product, Third Party Advisory
- http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.html Exploit, Third Party Advisory, VDB Entry
- https://github.com/TheHackingRabbi/CVE-2021-42662 Exploit, Third Party Advisory
- https://www.exploit-db.com/exploits/50450 Exploit, Third Party Advisory, VDB Entry
- https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.html Product, Third Party Advisory