Search results

Tour photo/image URLs are stored as plain strings with no validation — broken images and XSS via javascript: URLs possible

Status: Open.

#7 In devmuhib/MernStack-Tour-Management;

· saismrutiranjan18 opened on Mar 24, 2026

Review system has no "one review per user per tour" constraint — users can post unlimited reviews skewing ratings

Status: Open.

#6 In devmuhib/MernStack-Tour-Management;

· saismrutiranjan18 opened on Mar 24, 2026

No README — project has no setup instructions, making it impossible to run for the 75 forks and 108 stars who want to learn from it

Status: Open.

#5 In devmuhib/MernStack-Tour-Management;

· saismrutiranjan18 opened on Mar 24, 2026

JWT secret and MongoDB URI are likely hardcoded — credentials exposed in a public repo with 75 forks

Status: Open.

#4 In devmuhib/MernStack-Tour-Management;

· saismrutiranjan18 opened on Mar 24, 2026

is the source code is full mean readyy to use

Status: Open.

#1 In devmuhib/MernStack-Tour-Management;

· Ayububi opened on Aug 4, 2023