* Auto Generated CVE annotations [Wed Sep 7 15:59:37 UTC 2022] 🤖
* Fixed merge issues from previous PR
* moved vulnerabilities/wordpress/CVE-2019-10692.yaml to cves dir
* Fix CVSS information and other minor merge issues
Co-authored-by: Sullo <sullo@cirt.net>
An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link he will display the content of the HTML code of the attacker's choice.
Sandeep Singh
GitHub Action
MostInterestingBotInTheWorld
sullo
Ritik Chaddha
fxploit