CVE-2023-49272

Summary

CVE-2023-49272: This vulnerability affects Hotel Management v1.0, making it susceptible to multiple authenticated Reflected Cross-Site Scripting (XSS) attacks. The 'children' parameter in the reservation.php resource is copied into HTML documents as plain text, allowing any input to be echoed unmodified by the application. This issue poses a significant risk as an attacker could inject malicious scripts, potentially leading to data theft or unauthorized account access.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.