| 제목 | SourceCodester Resort Reservation System 1 Cross Site Scripting |
|---|
| 설명 | A stored cross-site scripting (XSS) vulnerability exists in the SourceCodester Resort Reservation System (PHP + SQLite). Authenticated users can inject arbitrary JavaScript through the Room Name and Description fields in the room management module. The payload is stored in the database and executed when rendered in application pages, potentially leading to session hijacking and administrative account compromise. |
|---|
| 원천 | ⚠️ https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-sourcecodester-resort-reservation-system-66c5a3c74865 |
|---|
| 사용자 | rvpipalwa (UID 93501) |
|---|
| 제출 | 2026. 02. 23. AM 05:54 (7 개월 ago) |
|---|
| 모더레이션 | 2026. 03. 07. AM 09:44 (12 days later) |
|---|
| 상태 | 중복 |
|---|
| VulDB 항목 | 240331 [Resort Reservation System 1.0 room/name/description 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 0 |
|---|