CVE-2023-3564

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /index.php. The manipulation of the argument adults/children/cal_id leads to cross site scripting. It is possible to launch the attack remotely. VDB-233358 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
GZ Scripts	GZ Multi Hotel Booking System	1.8

References

https://vuldb.com/?ctiid.233358Permissions Required, Third Party Advisory
https://vuldb.com/?id.233358Third Party Advisory
https://vuldb.com/?ctiid.233358Permissions Required, Third Party Advisory
https://vuldb.com/?id.233358Third Party Advisory

Timeline

Published: Jul 10, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-356418.8Internet Connection Sharing (ICS) Remote Code Execution Vulnerability CVE-2023-356426.5Internet Connection Sharing (ICS) Denial of Service Vulnerability CVE-2023-356437.5DHCP Server Service Information Disclosure Vulnerability CVE-2023-356447.8Windows Sysmain Service Elevation of Privilege Vulnerability CVE-2023-356456.4In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System e CVE-2023-356469.8In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no add CVE-2023-356479.8In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds chec CVE-2023-356489.8In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds chec CVE-2023-356497.2In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote CVE-2023-35655.4Cross-site Scripting (XSS) - Generic in GitHub repository nilsteampassnet/teampass prior to 3.0.10.CVE-2023-356527.5In ProtocolEmergencyCallListIndAdapter::Init of protocolcalladapter.cpp, there is a possible out of bounds read due to a missing bounds chec CVE-2023-356534.4In TBD of TBD, there is a possible way to access location information due to a permissions bypass. This could lead to local information disc