hotel_booking_script_project - MidnightBSD Security Advisories

Advisories for hotel_booking_script_project

CVE-2018-15190 LOW

PHP Scripts Mall hotel-booking-script 2.0.4 allows XSS via the First Name, Last Name, or Address field.

CVSS 2.0

Severity: LOW

Problem Type: CWE-79,

Products Affected

Vendor	Product	Version
hotel_booking_script_project	hotel_booking_script	2.0.4

CVE-2018-15191 MEDIUM

PHP Scripts Mall hotel-booking-script 2.0.4 allows remote attackers to cause a denial of service via crafted JavaScript code in the First Name, Last Name, or Address field.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor	Product	Version
hotel_booking_script_project	hotel_booking_script	2.0.4