PT-2025-41578 · Code Projects · Simple Online Hotel Reservation System

Chen1-Boop · Published 2025-10-10 · Updated 2025-10-11 · CVE-2025-60308

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions code-projects Simple Online Hotel Reservation System version 1.0

Description The Simple Online Hotel Reservation System contains a Cross Site Scripting (XSS) issue within the Add Room function. Specifically, entering malicious JavaScript code into the Description field can lead to the leakage of administrator cookie information when viewing room details. The vulnerable function is Add Room.

Recommendations Sanitize user input in the Description field of the Add Room function to prevent the injection of malicious JavaScript code.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-60308

Affected Products

Simple Online Hotel Reservation System

References · 8

• 🔥 https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-60308.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-60308 · Security Note
• https://osv.dev/vulnerability/CVE-2025-60308 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1976842743478419810 · Twitter Post
• https://twitter.com/CVEnew/status/1976698120953381173 · Twitter Post
• https://t.me/cveNotify/138182 · Telegram Post
• https://t.me/CVEtracker/34602 · Telegram Post
• http://code-projects.com · Note