CVE-2022-2292

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel Management System version 2.0

Description A problematic vulnerability has been found in the Room Edit Page component, specifically in the file /ci hms/massage room/edit/1. The issue arises from the manipulation of the massageroomDetails argument with malicious input, such as ">, leading to cross-site scripting. This attack can be launched remotely. The exploit has been publicly disclosed and may be used.

Recommendations For SourceCodester Hotel Management System version 2.0, as a temporary workaround, consider restricting access to the Room Edit Page or disabling the editing functionality until a patch is available. Avoid using the massageroomDetails argument in the affected page until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.