CVE-2023-49272mediumCWE-79

CVE-2023-49272: medium-severity vulnerability in Kashipara Group Hotel Management

Hotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)

Published · Updated

Follow this CVE+ Monitor Hotel Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.4%
Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
Kashipara Group · Hotel Management
Related CVEs — Kashipara Group Hotel Management

In the same product, most dangerous first.

CVE-2023-49271MEDIUMHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)EPSS 0.4%CVE-2023-49270MEDIUMHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)EPSS 0.4%CVE-2023-49269MEDIUMHotel Management v1.0 - Multiple Reflected Cross-Site Scripting (XSS)EPSS 0.4%