Multiple Persistent XSS Vulnerabilities in Tramyardg Hotel Management System 1.0

CVE-2022-36254 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname".

Learn more about our Web App Pen Testing.