Orta CVSS 4.1 PoC var
CVE-2025-60308: Simple Online Hotel Reservation System: siteler arası betik çalıştırma (XSS)
Açıklama (NVD)
code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information
Özet bilgiler
- Ürün
- Fabian Simple Online Hotel Reservation System
- CVSS v3.1
- 4.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N - EPSS
- %0,25 (yüzdelik 17)
- CWE
- CWE-79
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fabian-simple-online-hotel-reservation-system | 1.0 | 1.0 | — |