.. / CVE-2021-42663

• XSS
• Nuclei
• Web

Exploit for Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting (CVE-2021-42663)

Description:

Sourcecodester Online Event Booking and Reservation System 2.3.0 contains a cross-site scripting vulnerability in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a given link, the content of the HTML code of the attacker’s choice displays.

Nuclei Template

View the template here CVE-2021-42663.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-42663.yaml

References: