CVE-2026-124474mediumCWE-79

CVE-2026-124474: falha de média gravidade em meeting-room-booking-system mrbs-code

MRBS before 1.12.3 Reflected XSS via error parameter of view_entry.php

Publicada em

Seguir esta CVE+ Monitorar mrbs-code

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

10Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3
MRBS (Meeting Room Booking System) before 1.12.3 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script via the error parameter of view_entry.php. Attackers can send crafted links to logged-in users to read CSRF tokens, modify or delete bookings, or perform administrative actions.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
Produtos afetados
meeting-room-booking-system · mrbs-code
CVEs relacionadas — meeting-room-booking-system mrbs-code

No mesmo produto, das mais perigosas para as menos.

CVE-2026-46382HIGHMeeting Room Booking System has server-side request forgery in import functionalityEPSS 0.4%CVE-2026-46688MEDIUMMeeting Room Booking System has an unauthenticated open redirectEPSS 0.4%