High severity8.8NVD Advisory· Published Aug 20, 2024· Updated Jun 17, 2026

CVE-2024-42555

Description

A Cross-Site Request Forgery (CSRF) in the component admin_room_removed.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.

Affected products

Hotel Management/Hotel Managementllm-fuzzy
Hotel Management System/Hotel Management Systemdescription
Vaibhavverma9999/Hotel Management System
cpe:2.3:a:vaibhavverma9999:hotel_management_system:*:*:*:*:*:*:*:*
Range: <=2020-06-10

Patches

Vulnerability mechanics

References

gist.github.com/topsky979/afd445b90e13a27a6422cea2f5ff0f64nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000