CVE-2024-42555

A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-08-20

Last modified

2024-08-20

Weaknesses

CWE-352

Affected products

• Hotel Management System (Vaibhavverma9999)

References

• https://gist.github.com/topsky979/afd445b90e13a27a6422cea2f5ff0f64