CVE-2026-3819 PUBLISHED

SourceCodester Resort Reservation System Reservation Management page cross site scripting

Assigner: VulDB
Reserved: 08.03.2026 Published: 09.03.2026 Updated: 09.03.2026

A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
CVSS Score: 5.1

Product Status

Vendor SourceCodester
Product Resort Reservation System
Versions
  • Version 1.0 is affected

Credits

  • rvpipalwa (VulDB User) reporter

References

Problem Types

  • Cross Site Scripting CWE
  • Code Injection CWE