CVE-2025-8380

The CVE-2025-8380 entry concerns Campcodes Online Hotel Reservation System 1.0. A Cross-Site Scripting (XSS) flaw exists in the /admin/add_query_account.php file where manipulating the Name parameter can inject script. The vulnerability appears to be exploitable remotely and is supported by multi...

PT-2025-31522 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The issue is a SQL injection vulnerability affecting an unknown function within the /admin/ed...

PT-2025-31506 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A problematic vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The vulnerability affects unknown code within the /admin/add query account.php file...

PT-2025-31503 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0, affecting an unknown part of the file /admin/edit room.php. Manipulation of the photo argumen...

CVE-2025-8381: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /addreserve.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-8378: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2025-8380: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-8379: Unrestricted Upload of File with Dangerous Type

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-8382: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/editroom.php. The manipulation of the argument roomid leads to sql injection. It is possible to launch the attack remotely. The exploit...

WordPress My Reservation System plugin cross-site scripting vulnerability

WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...

WordPress My Reservation System plugin <= 2.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Matías Schiappacasse & Lukas Gaete in WordPress Plugin My Reservation System versions = 2.3...

CVE-2025-7022

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022 My Reservation System <= 2.3 - Reflected XSS

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022 My Reservation System <= 2.3 - Reflected XSS

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022

The My Reservation System WordPress plugin (versions through 2.3 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) flaw. The root cause is the failure to properly sanitize and escape user-supplied data before it is output back to the page. An attacker could exploit this by injecting a car...

PT-2025-30731 · WordPress · My Reservation System

Name of the Vulnerable Software and Affected Versions: My Reservation System WordPress plugin versions through 2.3 Description: The My Reservation System WordPress plugin does not properly sanitize and escape a parameter before outputting it, resulting in a Reflected Cross-Site Scripting issue...

WordPress plugin My Reservation System 安全漏洞

WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...

CVE-2025-7022: Undefined Security Weakness

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7838

CVE-2025-7838 affects Campcodes Online Movie Theater Seat Reservation System v1.0. The flaw resides in the file /admin/manage_seat.php where the ID parameter is manipulated to perform an SQL injection. This is a remote, unauthenticated vulnerability with potential high impact on confidentiality, ...