CVE-2022-28992

HIGH CVSS: 8.8 Published: 2022-05-20 Modified: 2026-06-17

Description

A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request.

Affected Platforms

Phpgurukul Online Banquet Booking System

Weakness Type

CWE-352

References