CVE-2023-3309

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources

Severity

5.4MEDIUM

EPSS

0.1%

top 70.29%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Resort Reservation System Resort Reservation System Project Resort Reservation System

Timeline

PublishedJun 18

Description

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NExploitability: 2.1 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/resort_reservation_system1.0

▶NVDresort_reservation_system_project/resort_reservation_system1.0

🔴Vulnerability Details

GHSA

GHSA-v3wm-9v28-m85w: A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1↗2023-06-18

▶

CVEList

SourceCodester Resort Reservation System Manage Room Page ?page=rooms cross site scripting↗2023-06-18

▶