CVE-2022-4251

LOW

Movie Ticket Booking System - XSS

Title source: rule
STIX 2.1

Description

A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionality of the file editBooking.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214628.

Scores

CVSS v3 2.4
EPSS 0.0017
EPSS Percentile 38.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-707
Status published
Products (1)
movie_ticket_booking_system_project/movie_ticket_booking_system
Published Dec 01, 2022
Tracked Since Feb 18, 2026