CVE-2020-35261 - Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php

Published Jul 15, 2022

5.4

MEDIUM

CVSS 3.1

EPSS 1.06%

Description

Cross Site Scripting (XSS) vulnerability in sourcecodester Multi Restaurant Table Reservation System 1.0 via the Restaurant Name field to /dashboard/profile.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0
x_refsource_MISCExploitThird Party Advisory
https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/49135
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html
x_refsource_MISCProduct

Link	Providers	Tags
https://github.com/yunaranyancat/poc-dump/tree/main/MultiRestaurantReservationSystem/1.0		x_refsource_MISCExploitThird Party Advisory
https://packetstormsecurity.com/files/159786/Multi-Restaurant-Table-Reservation-System-1.0-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/49135		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
https://www.sourcecodester.com/php/14568/multi-restaurant-table-reservation-system-php-full-source-code.html		x_refsource_MISCProduct