← back
CVE-2026-3819

SourceCodester Resort Reservation System Reservation Management page cross site scripting

CVSS 5.1 MEDIUMEPSS 0.3%CWE-79CWE-94
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.1EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
09 Mar 2026Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Resort Reservation System
References
https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312https://vuldb.com/?ctiid.349785https://vuldb.com/?id.349785https://vuldb.com/?submit.769578https://www.sourcecodester.com/