5.3
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Description
A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Basic Information
ID
CVE-2026-5705
Source
VulDB
Published
Apr 6, 2026 at 23:30
Modified
Apr 8, 2026 at 14:10
Affected Product
Vendor
code-projects
Product
Online Hotel Booking
Version
1.0
Affected Versions
code-projects Online Hotel Booking 1.0