CVE-2025-60308

4.1 MEDIUM
Published: October 10, 2025 Modified: October 16, 2025

Description

code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

CVSS v3.x Details

0.0 Low Medium High Critical 10.0
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://code-projects.com
Source: cve@mitre.org
Product
https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-60308.md
Source: cve@mitre.org
Exploit Third Party Advisory

2 reference(s) from NVD

Quick Stats

CVSS v3 Score
4.1 / 10.0
EPSS (Exploit Probability)
0.0%
12th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

fabian