Beveiligingsadvies

CVE-2023-49271

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-12-20 19:24:15
Laatst bijgewerkt 2025-05-19 14:47:07
Toegewezen door Fluid Attacks
CVSS-score 5.4
Status PUBLISHED

Beschrijving

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_out_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.