CVE-2023-6767

Name of the Vulnerable Software and Affected Versions SourceCodester Wedding Guest e-Book version 1.0

Description A vulnerability was found in SourceCodester Wedding Guest e-Book, affecting an unknown part of the file "/endpoint/add-guest.php". The manipulation of the name argument leads to cross-site scripting. It is possible to initiate the attack remotely.

Recommendations For version 1.0, consider disabling access to the "/endpoint/add-guest.php" endpoint until a patch is available. Restrict the manipulation of the name argument to minimize the risk of exploitation.