VDB

CVE-2023-5304

CVE-2023-5304 PUBLISHED CVSS 3.5 LOW

A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /book-services.php of the component Service Booking. The manipulation of the argument message leads to cross site scripting. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-240943.

EPSS 0.38% · 30.0th percentile

Risk Scores

CVSS 3.1
3.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS Score
0.38%
30.0th percentile

Affected Products

VendorProductVersions
anujk305online_banquet_booking_system1.0, 1.0, 1.0
anujk305online_banquet_booking_system1.0, 1.0, 1.0
n/aOnline Banquet Booking System1.0, 1.0, 1.0

Timeline

  • Sep 30, 2023 CVE Published
  • Oct 1, 2023 EPSS Score
  • Nov 2, 2023 EPSS Score
  • Dec 4, 2023 EPSS Score
  • Jan 6, 2024 EPSS Score
  • Feb 7, 2024 EPSS Score
  • Mar 10, 2024 EPSS Score
  • Apr 11, 2024 EPSS Score
  • May 13, 2024 EPSS Score
  • Jun 15, 2024 EPSS Score
  • Jul 17, 2024 EPSS Score
  • Aug 2, 2024 CVE Updated
Open in Interactive Console →
$ Console Community · 100/wk Open console ›