Threats tagged 'ghsa-vgcq-732g-5fp8'

MRBS (Meeting Room Booking System) versions before 1.12.3 have a reflected cross-site scripting (XSS) vulnerability in the view_entry.php script via the error parameter. This flaw allows unauthenticated attackers to craft malicious links that, when visited by logged-in users, can execute scripts to read CSRF tokens and perform unauthorized actions such as modifying or deleting bookings or executing administrative functions.