Cross-site Scripting Vulnerability in eZee Technosys Online Hotel Booking Engine

CVE-2025-58661

What is CVE-2025-58661?

The eZee Online Hotel Booking Engine contains a Cross-site Scripting vulnerability that allows an attacker to inject malicious scripts into web pages. This issue can lead to stored XSS, where the injected scripts are executed in the browser of users who access affected pages. The vulnerability affects all versions leading up to and including 1.0.0, highlighting the necessity for users to implement security measures and update their software to safeguard against potential attacks.

References