CVE-2024-8951

LOW

SourceCodester Resort Reservation System 1.0 - Cross-Site Scripting via manage_fee.php toview Parameter

Title source: llm
STIX 2.1

Description

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_fee.php. The manipulation of the argument toview leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

References (5)

Core 5
Core References
Permissions Required vdb-entry technical-description
https://vuldb.com/?id.277777
Permissions Required signature permissions-required
https://vuldb.com/?ctiid.277777
Third Party Advisory third-party-advisory
https://vuldb.com/?submit.409586

Scores

CVSS v3 3.5
EPSS 0.0041
EPSS Percentile 32.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-79
Status published
Products (1)
oretnom23/resort_reservation_system 1.0
Published Sep 17, 2024
Tracked Since Feb 18, 2026