CVE-2021-42662

A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to cookie stealing and more.

• CWE-79

• http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/TheHackingRabbi/CVE-2021-42662Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50450Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.htmlProduct, Third Party Advisory
• http://packetstormsecurity.com/files/164615/Online-Event-Booking-And-Reservation-System-1.0-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/TheHackingRabbi/CVE-2021-42662Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/50450Exploit, Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/php/14241/online-event-booking-and-reservation-system-phpmysql.htmlProduct, Third Party Advisory

Published

Nov 5, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-42651A Server Side Template Injection (SSTI) vulnerability in Pen…8.8
• CVE-2021-42654SiteServer CMS < V5.1 is affected by an unrestricted upload …9.8
• CVE-2021-42655SiteServer CMS V6.15.51 is affected by a SQL injection vulne…8.8
• CVE-2021-42656SiteServer CMS V6.15.51 is affected by a Cross Site Scriptin…5.4
• CVE-2021-42659There is a buffer overflow vulnerability in the Web server h…6.5
• CVE-2021-4266A vulnerability classified as problematic has been found in …6.1
• CVE-2021-42663An HTML injection vulnerability exists in Sourcecodester Onl…4.3
• CVE-2021-42664A Stored Cross Site Scripting (XSS) Vulneraibiilty exists in…5.4
• CVE-2021-42665An SQL Injection vulnerability exists in Sourcecodester Engi…9.8
• CVE-2021-42666A SQL Injection vulnerability exists in Sourcecodester Engin…8.8
• CVE-2021-42667A SQL Injection vulnerability exists in Sourcecodester Onlin…9.8
• CVE-2021-42668A SQL Injection vulnerability exists in Sourcecodester Engin…9.8