CVE-2026-5705

The CVE-2026-5705 entry describes a cross-site scripting vulnerability in code-projects Online Hotel Booking 1.0. Affected is an unknown functionality in the Booking Endpoint at /booknow.php, where manipulation of the roomname argument enables XSS. Attacks can be launched remotely and the exploit...

CVE-2026-5705 code-projects Online Hotel Booking Booking Endpoint booknow.php cross site scripting

A vulnerability was identified in code-projects Online Hotel Booking 1.0. Affected by this vulnerability is an unknown functionality of the file /booknow.php of the component Booking Endpoint. Such manipulation of the argument roomname leads to cross site scripting. It is possible to launch the...