CVE 5.3 MEDIUM

code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting_CVE-2026-5705

5.3 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P

Description

A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Basic Information

ID CVE-2026-5705
Source VulDB
Published Apr 6, 2026 at 23:30
Modified Apr 8, 2026 at 14:10

Affected Product

Vendor code-projects
Product Online Hotel Booking
Version 1.0
Affected Versions code-projects Online Hotel Booking 1.0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.