Description

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contact_us of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205812.

Related CPE's

a

wedding_hall_booking_system_project

wedding_hall_booking_system

-

Vulnerable

References

https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.md

ExploitThird Party Advisory

https://vuldb.com/?id.205812

Third Party Advisory

Weaknesses

[email protected]

Primary
CWE-79

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.4 · Medium

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2022-08-06T18:15:08.573

2 years ago

Last modified

2022-08-11T14:15:24.430

2 years ago