CoverManager Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in CoverManager booking software. This issue allows attackers to inject malicious scripts that are permanently stored on the server and executed in the browsers of users visiting the affected page. The vulnerability can lead to the theft of sensitive information such as session cookies and login credentials, and allow attackers to perform actions on behalf of the affected user.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user visiting the affected page.

Remediation

The vulnerability has been fixed in the latest version of CoverManager.