Vulnerability Database

309,237

Total vulnerabilities in the database

CVE-2025-60308

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information

  • Published: Oct 10, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-60308
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 4.1
  • AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
fabian / simple_online_hotel_reservation_system 1.0 1.0.x