CVE-2022-2691

A vulnerability, which was classified as problematic, has been found in SourceCodester Wedding Hall Booking System. Affected by this issue is some unknown functionality of the file /whbs/?page=manage_account of the component Profile Page. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205814 is the identifier assigned to this vulnerability.

• CWE-79

• https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205814Third Party Advisory
• https://github.com/Jamison2022/Wedding-Hall-Booking-System/blob/main/WHBS-XSS.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205814Third Party Advisory

Published

Aug 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26903Windows Graphics Component Remote Code Execution Vulnerabili…7.8
• CVE-2022-26904Windows User Profile Service Elevation of Privilege Vulnerab…7
• CVE-2022-26905Microsoft Edge (Chromium-based) Spoofing Vulnerability4.3
• CVE-2022-26907Azure SDK for .NET Information Disclosure Vulnerability5.3
• CVE-2022-26908Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26909Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26910Skype for Business and Lync Spoofing Vulnerability5.3
• CVE-2022-26911Skype for Business Information Disclosure Vulnerability6.5
• CVE-2022-26912Microsoft Edge (Chromium-based) Elevation of Privilege Vulne…8.3
• CVE-2022-26913Windows Authentication Information Disclosure Vulnerability7.4
• CVE-2022-26914Win32k Elevation of Privilege Vulnerability7.8
• CVE-2022-26915Windows Secure Channel Denial of Service Vulnerability7.5