CVE-2022-2691

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manage_account of the component Profile Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205814 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-269105.3Skype for Business and Lync Spoofing VulnerabilityCVE-2022-269116.5Skype for Business Information Disclosure VulnerabilityCVE-2022-269128.3Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2022-269137.4Windows Authentication Information Disclosure VulnerabilityCVE-2022-269147.8Win32k Elevation of Privilege VulnerabilityCVE-2022-269157.5Windows Secure Channel Denial of Service VulnerabilityCVE-2022-269167.8Windows Fax Compose Form Remote Code Execution VulnerabilityCVE-2022-269177.8Windows Fax Compose Form Remote Code Execution VulnerabilityCVE-2022-269187.8Windows Fax Compose Form Remote Code Execution VulnerabilityCVE-2022-269198.1Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2022-26925.4A vulnerability, which was classified as problematic, was found in SourceCodester Wedding Hall Booking System. This affects an unknown part CVE-2022-269205.5Windows Graphics Component Information Disclosure Vulnerability
CVE-2022-2691: Medium severity, CVSS 5.4 | Vulnix