Aaryan11X

**Name of the Vulnerable Software and Affected Versions** code-projects Car Rental Management System version 1.0 **Description** A problematic issue has been found in the code-projects Car Rental Management System, affecting some unknown processing of the file /admin/manage-pages.php. The manipulation of the `pgdetails` argument leads to cross-site scripting. The attack may be initiated remotely. An exploit has been publicly disclosed, making it accessible for potential use. **Recommendations** For version 1.0, consider disabling access to the /admin/manage-pages.php file or restricting the manipulation of the `pgdetails` argument until a patch is available. As a temporary workaround, avoid using the `pgdetails` argument in the affected file to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** code-projects Tourism Management System version 1.0 **Description** A problematic issue was found in the code-projects Tourism Management System, affecting an unknown function of the file /admin/manage-pages.php. The manipulation of the `pgedetails` argument leads to cross-site scripting, which can be launched remotely. An exploit has been publicly disclosed, making it potentially usable. **Recommendations** For code-projects Tourism Management System version 1.0, consider disabling access to the `/admin/manage-pages.php` file or restricting the use of the `pgedetails` argument until a patch is available. As a temporary workaround, avoid using the `pgedetails` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.