Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by 3 types of users, namely system administrators, students and faculty. sourcecodester Online Event Booking and Reservation System version 1.0 has a cross-site scripting vulnerability that can be exploited by attackers to run javascript commands that lead to cookie theft.