CVE-2022-46089 - Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter

Back Back to CVE browser

MEDIUM

Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter

Published Mar 7, 2024

6.1

MEDIUM

CVSS 3.1

EPSS 0.39%

Description

Cross Site Scripting (XSS) vulnerability in the add-airline form of Online Flight Booking Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter.

Affected products

Vendor SourceCodester Product Online Flight Booking Management System Default
unknown
Affected
- 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SourceCodester	Online Flight Booking Management System	unknown	Affected 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48927
Advisory
https://github.com/ASR511-OO7/CVE-2022-46089/blob/main/CVE-35
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-48927		Advisory
https://github.com/ASR511-OO7/CVE-2022-46089/blob/main/CVE-35		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 7, 2024

Updated Aug 16, 2024

Reserved Nov 28, 2022

Link CVE-2022-46089

CISA Vulnrichment

Updated Mar 7, 2024

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2022-46089

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 7, 2024

Updated Aug 16, 2024

Link EUVD-2022-48927

GitHub

No data