Cross Site Scripting Vulnerability in itsourcecode Airline Reservation System
CVE-2026-116514

5.3MEDIUM

Key Information:

Vendor: Itsourcecode
Status: Airline Reservation System
Vendor: CVE Published:; 26 October 2026

🔔 Create Itsourcecode Vulnerability Alert

What is CVE-2026-116514?

A vulnerability exists in the itsourcecode Airline Reservation System 1.0 that could allow attackers to exploit the application through the /book_flight.php file. By manipulating the 'max' argument, attackers can execute a cross site scripting (XSS) attack remotely. This exploit has been publicly disclosed, which makes it essential for users of this system to take immediate action to secure their applications against potential threats.