| عنوان | SourceCodester Resort Reservation System 1 Cross Site Scripting |
|---|
| الوصف | A stored cross-site scripting (XSS) vulnerability exists in the SourceCodester Resort Reservation System (PHP + SQLite). Authenticated users can inject arbitrary JavaScript through the Room Name and Description fields in the room management module. The payload is stored in the database and executed when rendered in application pages, potentially leading to session hijacking and administrative account compromise. |
|---|
| المصدر | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-sourcecodester-resort-reservation-system-66c5a3c74865 |
|---|
| المستخدم | rvpipalwa (UID 93501) |
|---|
| ارسال | 23/02/2026 05:54 AM (7 أشهر منذ) |
|---|
| الاعتدال | 07/03/2026 09:44 AM (12 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 240331 [Resort Reservation System 1.0 room/name/description البرمجة عبر المواقع] |
|---|
| النقاط | 0 |
|---|