Hostel Management System v2.1 vulnerabilities

itsourcecode Hostel Management System 1.0 has an XSS vulnerability in /justines/index.php in the POST Request Handler component. Manipulating the from argument allows remote attacks. The exploit has been publicly released.

The Hostel Management System v2.1 has a Cross-Site Scripting (XSS) vulnerability that allows an attacker to execute arbitrary code via a crafted payload in the search booking field.

The Hostel Management System v2.1 has a Cross Site Scripting vulnerability that allows an attacker to execute arbitrary code via crafted input in the Guardian name, Guardian relation, complimentary address, city, permanent address, and city fields on the Book Hostel & Room Details page.