#547 Cross-Site-Scripting (XSS)

[Nguyễn Hữu Cường]

Hello there,

While doing a security check, I found a Stored Cross-Site-Scripting vulnerability in MRBS v1.11.1. The room name is printed without being wrapped with the htmlspecialchars function. This results in execution of a script placed in the room name.

Thanks,
Cuong

[Campbell Morrison]

Could you post the relevant extract from the document here please, so I don't have to open an unknown docx file?

[Nguyễn Hữu Cường]

oke.

[Nguyễn Hữu Cường]

Here is it.

[Campbell Morrison]

Thanks. I can reproduce the problem and am working on a fix.

[Nguyễn Hữu Cường]

With the bug i found, can you give me the cve or the bounty?

[Campbell Morrison]

Now fixed (temporarily - there may be a better fix) in bc1f24f.

[Nguyễn Hữu Cường]

With the bug i found, can you give me the cve or the bounty?

[John Beranek]

This is now tracked at https://github.com/meeting-room-booking-system/mrbs-code/issues/744