CVE-2023-5303: Online Banquet Booking System Account Detail view-booking-detail.php cross site scripting
A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking-detail.php of the component Account Detail Handler. The manipulation of the argument username leads to cross site scripting. It is possible to launch the attack remotely. VDB-240942 is the identifier assigned to this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-5303?
CVE-2023-5303 is a vulnerability found in Online Banquet Booking System 1.0 that allows for cross-site scripting (XSS) attacks through the manipulation of the 'username' argument in the /view-booking-detail.php file of the Account Detail Handler component.
How severe is CVE-2023-5303?
CVE-2023-5303 has a severity rating of 6.1, which is classified as medium.
How does CVE-2023-5303 affect Online Banquet Booking System 1.0?
CVE-2023-5303 affects the Online Banquet Booking System 1.0 by allowing attackers to perform cross-site scripting (XSS) attacks by manipulating the 'username' argument in the /view-booking-detail.php file of the Account Detail Handler component.
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-5303?
CVE-2023-5303 is associated with CWE ID 79, which represents Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').
How can I fix CVE-2023-5303 in Online Banquet Booking System 1.0?
To fix CVE-2023-5303, it is recommended to sanitize and validate user input to prevent cross-site scripting (XSS) attacks in the Online Banquet Booking System 1.0.