CVE-2023-2565

A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complaint_type with the input <script>alert(document.cookie)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228172.

• CWE-79
• CWE-79

• https://github.com/admin-passwd/bug_report/blob/main/XSS-1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228172Permissions Required, Third Party Advisory
• https://vuldb.com/?id.228172Third Party Advisory
• https://github.com/admin-passwd/bug_report/blob/main/XSS-1.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.228172Permissions Required, Third Party Advisory
• https://vuldb.com/?id.228172Third Party Advisory

Published

May 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25644 There is a denial of service vulnerability in some ZTE mobi…7.5
• CVE-2023-25645There is a permission and access control vulnerability in so…7.7
• CVE-2023-25646There is an unauthorized access vulnerability in ZTE H388X. …6.4
• CVE-2023-25647 There is a permission and access control vulnerability in…3.3
• CVE-2023-25648 There is a weak folder permission vulnerability in ZTE's ZX…7.8
• CVE-2023-25649 There is a command injection vulnerability in a mobile inte…8.8
• CVE-2023-25650 There is an arbitrary file download vulnerability in ZXCLOU…6.5
• CVE-2023-25651 There is a SQL injection vulnerability in some ZTE mobile i…8
• CVE-2023-25652Git is a revision control system. Prior to versions 2.30.9, …7.5
• CVE-2023-25653node-jose is a JavaScript implementation of the JSON Object …7.5
• CVE-2023-25654baserCMS is a Content Management system. Prior to version 4.…9.8
• CVE-2023-25655baserCMS is a Content Management system. Prior to version 4.…9.8