Cross Site Scripting Vulnerability in SourceCodester Resort Reservation System
CVE-2026-3819

5.1MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Resort Reservation System
Vendor
CVE Published:
9 March 2026

What is CVE-2026-3819?

A security issue has been identified within the Reservation Management Module of SourceCodester's Resort Reservation System 1.0, specifically in the handling of the 'ID' argument in the URL. This flaw allows an attacker to manipulate input parameters, potentially leading to cross site scripting (XSS) attacks. Such attacks can be executed remotely, posing a significant risk to user data and application integrity. It is crucial for users and administrators to implement necessary security measures to mitigate this risk.

Affected Version(s)

Resort Reservation System 1.0

References

https://vuldb.com/?id.349785
vdb-entrytechnical-description
https://vuldb.com/?ctiid.349785
signaturepermissions-required
https://vuldb.com/?submit.769578
third-party-advisory

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

rvpipalwa (VulDB User)
.