Vulnerabilities > Phpgurukul > Tourism Management System > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-08-06 CVE-2024-41333 Cross-site Scripting vulnerability in PHPgurukul Tourism Management System 2.0
A reflected cross-site scripting (XSS) vulnerability in Phpgurukul Tourism Management System v2.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the uname parameter.
network
low complexity
phpgurukul CWE-79
6.1
2022-06-14 CVE-2022-30930 Cross-Site Request Forgery (CSRF) vulnerability in PHPgurukul Tourism Management System 3.2
Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF).
network
low complexity
phpgurukul CWE-352
4.3