PT-2025-31740 · Sourcecodester · Sourcecodester Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in SourceCodester Online Hotel Reservation System 1.0. The issue affects an unknown part of the file /admin/deletegallery.php and allows f...

CVE-2025-8382

CVE-2025-8382 affects Campcodes Online Hotel Reservation System 1.0, specifically the /admin/edit_room.php component. The vulnerability is a SQL injection caused by manipulation of the room_id argument, enabling remote exploitation. Multiple connected sources corroborate the issue and describe th...

CVE-2025-8381 Campcodes Online Hotel Reservation System add_reserve.php sql injection

A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /addreserve.php. The manipulation of the argument roomid leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-8381

CVE-2025-8381 affects Campcodes Online Hotel Reservation System 1.0. The vulnerability is a SQL injection in the parameter manipulated via the file /add_reserve.php (argument room_id ). This can be triggered remotely and may allow an attacker to read/modify data or impact availability, as indicat...

CVE-2025-8380

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-8380

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-8379

A vulnerability classified as critical has been found in Campcodes Online Hotel Reservation System 1.0. This affects an unknown part of the file /admin/editroom.php. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit ha...

CVE-2025-8380 Campcodes Online Hotel Reservation System add_query_account.php cross site scripting

A vulnerability classified as problematic was found in Campcodes Online Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /admin/addqueryaccount.php. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The...

CVE-2025-8380

The CVE-2025-8380 entry concerns Campcodes Online Hotel Reservation System 1.0. A Cross-Site Scripting (XSS) flaw exists in the /admin/add_query_account.php file where manipulating the Name parameter can inject script. The vulnerability appears to be exploitable remotely and is supported by multi...

PT-2025-31522 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The issue is a SQL injection vulnerability affecting an unknown function within the /admin/ed...

PT-2025-31503 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A critical vulnerability exists in Campcodes Online Hotel Reservation System 1.0, affecting an unknown part of the file /admin/edit room.php. Manipulation of the photo argumen...

PT-2025-31506 · Unknown · Campcodes Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Hotel Reservation System version 1.0 Description: A problematic vulnerability exists in Campcodes Online Hotel Reservation System 1.0. The vulnerability affects unknown code within the /admin/add query account.php file...

WordPress My Reservation System plugin cross-site scripting vulnerability

WordPress My Reservation System plugin is a booking system plugin based on the WordPress platform, which is mainly used for the development of online booking functions for hotels, B&Bs, villas and other accommodation scenarios. WordPress My Reservation System plugin suffers from a cross-site...

WordPress My Reservation System plugin <= 2.3 - Reflected XSS vulnerability

Reflected XSS vulnerability discovered by Matías Schiappacasse & Lukas Gaete in WordPress Plugin My Reservation System versions = 2.3...

CVE-2025-7022

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022 My Reservation System <= 2.3 - Reflected XSS

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022 My Reservation System <= 2.3 - Reflected XSS

The My Reservation System WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2025-7022

The My Reservation System WordPress plugin (versions through 2.3 ) is vulnerable to a Reflected Cross-Site Scripting (XSS) vulnerability. The root cause is the failure to properly sanitize and escape user-supplied data before outputting it back to the page. An attacker could exploit this by injec...

PT-2025-30731 · WordPress · My Reservation System

Name of the Vulnerable Software and Affected Versions: My Reservation System WordPress plugin versions through 2.3 Description: The My Reservation System WordPress plugin does not properly sanitize and escape a parameter before outputting it, resulting in a Reflected Cross-Site Scripting issue...