CVE-2026-116514

The itsourcecode Airline Reservation System 1.0 is vulnerable to a cross-site scripting (XSS) vulnerability within the /book_flight.php file. The root cause involves a failure to properly neutralize the max argument, allowing for remote execution of the attack. Public exploits are available, and ...

CVE-2026-116514 itsourcecode Airline Reservation System book_flight.php cross site scripting

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /bookflight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the...