| शीर्षक | SourceCodester Resort Reservation System 1 Cross Site Scripting |
|---|
| विवरण | A stored cross-site scripting (XSS) vulnerability exists in the Reservation Management module of the SourceCodester Resort Reservation System (PHP + SQLite). The application fails to properly sanitize and encode user-supplied input in reservation fields such as Fullname and Remarks. Malicious JavaScript injected into these fields is stored in the database and executed when rendered in administrative pages, potentially leading to session hijacking and privilege escalation. |
|---|
| स्रोत | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312 |
|---|
| उपयोगकर्ता | rvpipalwa (UID 93501) |
|---|
| सबमिशन | 28/02/2026 11:14 AM (7 महीनों पहले) |
|---|
| संयम | 08/03/2026 06:43 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 349785 [SourceCodester Resort Reservation System 1.0 Reservation Management ?page=manage_reservation id क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|