Threats affecting pkg:github/mrbs-code

MRBS (Meeting Room Booking System) versions before 1.12.3 contain a reflected cross-site scripting (XSS) vulnerability in the view_entry.php script via the error parameter. This flaw allows unauthenticated attackers to craft malicious links that, when visited by logged-in users, can lead to theft of CSRF tokens and unauthorized modification or deletion of bookings, including administrative actions. The vulnerability is fixed in version 1.12.3.