PT-2026-23974 · Unknown · Simple Flight Ticket Booking System

Xuanyuesanshi · Published 2026-03-08 · Updated 2026-03-08 · CVE-2026-3763

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Simple Flight Ticket Booking System version 1.0

Description A cross site scripting issue exists in Simple Flight Ticket Booking System 1.0. The issue is located in the showhistory.php file, within an unknown function. The manipulation of this function can lead to cross site scripting. The exploit for this issue has been made public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-3763

Affected Products

Simple Flight Ticket Booking System

References · 11

• 🔥 https://github.com/shenxianyuguitian/simple-flight-booking-XSS · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-3763 · Security Note
• https://osv.dev/vulnerability/CVE-2026-3763 · Vendor Advisory
• https://code-projects.org · Note
• https://vuldb.com/?id.349741 · Note
• https://twitter.com/VulmonFeeds/status/2030731617996616147 · Twitter Post
• https://vuldb.com/?ctiid.349741 · Note
• https://t.me/CVEtracker/46834 · Telegram Post
• https://twitter.com/CVEnew/status/2030747836103770334 · Twitter Post
• https://vuldb.com/?submit.768182 · Note
• https://twitter.com/cyberbivash/status/2030739953513070924 · Twitter Post