Headline
CVE-2022-25114: CVE-nu11secur1ty/vendors/PuneethReddyHC/event-management-1.0 at main · nu11secur1ty/CVE-nu11secur1ty
Event Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the full_name parameter under register.php.
event-management-1.0****Description:
The system Event-management v1.0 is vulnerable to XSS-Reflected PHPSESSID hijacking. The parameter full_name from register.php is not sanitizing correctly, the attacker can take a PHPSESSID and he can use it to manipulate an already created login session of the system.
In action:
Vulnerable parameter:
