Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.
References
| Link | Resource |
|---|---|
| https://fluidattacks.com/advisories/lang/ | Third Party Advisory |
| https://fluidattacks.com/advisories/lang/ | Third Party Advisory |
| https://www.kashipara.com/ | Product |
| https://www.kashipara.com/ | Product |
Configurations
History
19 May 2025, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| Summary | Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'children' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response. |
01 Feb 2024, 18:06
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
26 Dec 2023, 21:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| First Time |
Kashipara
Kashipara hotel Management |
|
| CPE | cpe:2.3:a:kashipara:hotel_management:1.0:*:*:*:*:*:*:* | |
| References | () https://fluidattacks.com/advisories/lang/ - Third Party Advisory | |
| References | () https://www.kashipara.com/ - Product |
20 Dec 2023, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-12-20 20:15
Updated : 2025-05-19 15:15
NVD link : CVE-2023-49272
Mitre link : CVE-2023-49272
JSON object : View
Products Affected
kashipara
- hotel_management
CWE
No CWE.