{"id":"CVE-2022-27475","details":"Cross site scripting (XSS) vulnerability in tramyardg hotel-mgmt-system, allows attackers to execute arbitrary code when when /admin.php is loaded.","modified":"2026-10-21T02:47:47.980251003Z","published":"2022-04-13T11:39:02Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27475.json","cna_assigner":"mitre"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/27xxx/CVE-2022-27475.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27475"},{"type":"FIX","url":"https://github.com/tramyardg/hotel-mgmt-system/commit/3aa5fdd736927f4ba8d4b7efbba850a258ab42ce"},{"type":"PACKAGE","url":"https://github.com/tramyardg/hotel-mgmt-system"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/tramyardg/hotel-mgmt-system","events":[{"introduced":"0"},{"fixed":"3aa5fdd736927f4ba8d4b7efbba850a258ab42ce"}],"database_specific":{"extracted_events":[{"source":"REFERENCES_COMMIT","range":[{"fixed":"3aa5fdd736927f4ba8d4b7efbba850a258ab42ce"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-27475.json"}}],"schema_version":"1.9.0"}