CVE-2025-63949

A Reflected Cross-Site Scripting XSS vulnerability in yohanawi Hotel Management System commit 87e004a allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php...

CVE-2025-63949

A Reflected Cross-Site Scripting (XSS) vulnerability exists in the yohanawi Hotel Management System (specifically commit 87e004a ). The flaw is caused by an unfiltered 'error' parameter within the pages/room.php file, which allows a remote attacker to execute arbitrary web scripts. To mitigate th...