https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-42667.htmlhttps://patchthecve.com/cve/CVE-2021-42667.htmlWed, 17 Jun 2026 04:09:56 +0000CRITICAL 9.8: A SQL Injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP in event-management/views. An attacker can leverage this vulnerability in order to manipulate the sql query performed. As a result he can extract sensitive data from the web server and in some chttps://patchthecve.com/cve/CVE-2021-42663.htmlhttps://patchthecve.com/cve/CVE-2021-42663.htmlWed, 17 Jun 2026 04:09:55 +0000MEDIUM 4.3: An HTML injection vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the msg parameter to /event-management/index.php. An attacker can leverage this vulnerability in order to change the visibility of the website. Once the target user clicks on a givenhttps://patchthecve.com/cve/CVE-2021-42662.htmlhttps://patchthecve.com/cve/CVE-2021-42662.htmlWed, 17 Jun 2026 04:09:55 +0000MEDIUM 5.4: A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Online Event Booking and Reservation System in PHP/MySQL via the Holiday reason parameter. An attacker can leverage this vulnerability in order to run javascript commands on the web server surfers behalf, which can lead to co