CVE-2022-2689

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contact_us of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205812.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-268907.5On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prior to 16.1.2.1, 15.1.x versions prior to 15.1.5, 14.1.x versions prior to 14.1.4.CVE-2022-268918.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-268948.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-268958.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-268964.9Azure Site Recovery Information Disclosure VulnerabilityCVE-2022-268974.9Azure Site Recovery Information Disclosure VulnerabilityCVE-2022-268987.2Azure Site Recovery Remote Code Execution VulnerabilityCVE-2022-268998.8Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-26905.4A vulnerability classified as problematic was found in SourceCodester Wedding Hall Booking System. Affected by this vulnerability is an unknCVE-2022-269008.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-269017.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2022-269037.8Windows Graphics Component Remote Code Execution Vulnerability
CVE-2022-2689: Medium severity, CVSS 5.4 | Vulnix