<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: wedding planner project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-41539: Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/</title><link>https://patchthecve.com/cve/CVE-2022-41539.html</link><guid>https://patchthecve.com/cve/CVE-2022-41539.html</guid><pubDate>Wed, 17 Jun 2026 05:03:21 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/users_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.</description></item><item><title>CVE-2022-41538: Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Weddin</title><link>https://patchthecve.com/cve/CVE-2022-41538.html</link><guid>https://patchthecve.com/cve/CVE-2022-41538.html</guid><pubDate>Wed, 17 Jun 2026 05:03:20 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Wedding-Management-PHP/admin/photos_add.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.</description></item><item><title>CVE-2022-42229: Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.</title><link>https://patchthecve.com/cve/CVE-2022-42229.html</link><guid>https://patchthecve.com/cve/CVE-2022-42229.html</guid><pubDate>Wed, 17 Jun 2026 05:04:32 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.</description></item><item><title>CVE-2022-42034: Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.</title><link>https://patchthecve.com/cve/CVE-2022-42034.html</link><guid>https://patchthecve.com/cve/CVE-2022-42034.html</guid><pubDate>Wed, 17 Jun 2026 05:04:14 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.</description></item><item><title>CVE-2022-42075: Wedding Planner v1.0 is vulnerable to arbitrary code execution.</title><link>https://patchthecve.com/cve/CVE-2022-42075.html</link><guid>https://patchthecve.com/cve/CVE-2022-42075.html</guid><pubDate>Wed, 17 Jun 2026 05:04:18 +0000</pubDate><description>CRITICAL 9.8: Wedding Planner v1.0 is vulnerable to arbitrary code execution.</description></item><item><title>CVE-2022-40485: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_</title><link>https://patchthecve.com/cve/CVE-2022-40485.html</link><guid>https://patchthecve.com/cve/CVE-2022-40485.html</guid><pubDate>Wed, 17 Jun 2026 05:01:26 +0000</pubDate><description>CRITICAL 9.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_detail.php.</description></item><item><title>CVE-2022-40484: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm</title><link>https://patchthecve.com/cve/CVE-2022-40484.html</link><guid>https://patchthecve.com/cve/CVE-2022-40484.html</guid><pubDate>Wed, 17 Jun 2026 05:01:26 +0000</pubDate><description>CRITICAL 9.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_edit.php.</description></item><item><title>CVE-2022-40483: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_</title><link>https://patchthecve.com/cve/CVE-2022-40483.html</link><guid>https://patchthecve.com/cve/CVE-2022-40483.html</guid><pubDate>Wed, 17 Jun 2026 05:01:26 +0000</pubDate><description>CRITICAL 9.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_details.php.</description></item><item><title>CVE-2022-40404: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/se</title><link>https://patchthecve.com/cve/CVE-2022-40404.html</link><guid>https://patchthecve.com/cve/CVE-2022-40404.html</guid><pubDate>Wed, 17 Jun 2026 05:01:22 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/select.php.</description></item><item><title>CVE-2022-40403: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/fe</title><link>https://patchthecve.com/cve/CVE-2022-40403.html</link><guid>https://patchthecve.com/cve/CVE-2022-40403.html</guid><pubDate>Wed, 17 Jun 2026 05:01:21 +0000</pubDate><description>HIGH 7.2: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/feature_edit.php.</description></item><item><title>CVE-2022-40402: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm</title><link>https://patchthecve.com/cve/CVE-2022-40402.html</link><guid>https://patchthecve.com/cve/CVE-2022-40402.html</guid><pubDate>Wed, 17 Jun 2026 05:01:21 +0000</pubDate><description>HIGH 8.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /admin/client_assign.php.</description></item><item><title>CVE-2022-38509: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /</title><link>https://patchthecve.com/cve/CVE-2022-38509.html</link><guid>https://patchthecve.com/cve/CVE-2022-38509.html</guid><pubDate>Wed, 17 Jun 2026 04:56:46 +0000</pubDate><description>CRITICAL 9.8: Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /admin/budget.php.</description></item></channel></rss>