Resort Reservation System
CVE-2023-43458
MEDIUM
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
Lifecycle Timeline
1DescriptionNVD
Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage_room function.
AnalysisAI
Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Cross Site Scripting (XSS) vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manage_room function. Affected products include: Resort Reservation System Project Resort Reservation System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.
More in Resort Reservation System
View allA vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. Rated critica
A vulnerability, which was classified as critical, was found in SourceCodester Resort Reservation System 1.0. Rated crit
A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Rated
A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0.php. R
A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Rated medium severi
A vulnerability, which was classified as problematic, was found in SourceCodester Resort Reservation System 1.0. Rated m
A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Rated medium severi
Unrestricted file upload in SourceCodester Resort Reservation System 1.0 allows authenticated remote attackers to upload
SourceCodester Resort Reservation System 1.0 contains SQL injection in the /room_rates.php endpoint via the q parameter,
SQL injection in SourceCodester Resort Reservation System 1.0 via the q parameter in /accommodation.php allows remote au
A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown funct
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today