CVEvulnerability
CVE-2023-34486
6.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-06-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
Description
itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.
Affected configurations
• online hotel management system project online hotel management system 1.0.0
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- https://github.com/JunyanYip/itsourcecode_justines_xss_vul Exploit, Third Party Advisory
- https://github.com/JunyanYip/itsourcecode_justines_xss_vul Exploit, Third Party Advisory