CVE-2022-2689

A vulnerability classified as problematic has been found in SourceCodester Wedding Hall Booking System. Affected is an unknown function of the file /whbs/?page=contact_us of the component Contact Page. The manipulation of the argument Message leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205812.

• CWE-79

• https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205812Third Party Advisory
• https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205812Third Party Advisory

Published

Aug 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-2688A vulnerability was found in SourceCodester Expense Manageme…9.8
• CVE-2022-26884Users can read any files by log server, Apache DolphinSchedu…6.5
• CVE-2022-26885When using tasks to read config files, there is a risk of da…7.5
• CVE-2022-26887Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26888Cross-site scripting in the Intel(R) Quartus Prime Pro and S…4.1
• CVE-2022-26889In Splunk Enterprise versions before 8.1.2, the uri path to …8.8
• CVE-2022-26890On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prio…7.5
• CVE-2022-26891Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26894Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26895Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26896Azure Site Recovery Information Disclosure Vulnerability4.9
• CVE-2022-26897Azure Site Recovery Information Disclosure Vulnerability4.9