CVE-2025-11119: itsourcecode Hostel Management System POST Request index.php cross site scripting

Published Sep 28, 2025

Updated

A security flaw has been discovered in itsourcecode Hostel Management System 1.0. Impacted is an unknown function of the file /justines/index.php of the component POST Request Handler. Performing manipulation of the argument from results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited.

Affected Software

2 affected components

itsourcecode Hostel Management System=1.0

Angeljudesuarez Hostel Management System=1.0

Event History

Sep 28, 2025

CVE Published

via MITRE·08:32 PM

Data Sourced

via MITRE·08:32 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11119?

CVE-2025-11119 has a medium severity level due to its potential for cross-site scripting vulnerabilities.

How do I fix CVE-2025-11119?

To fix CVE-2025-11119, ensure proper input validation and sanitization in the POST request handler in the affected file.

Which software is affected by CVE-2025-11119?

CVE-2025-11119 affects itsourcecode Hostel Management System version 1.0.

What type of vulnerability is CVE-2025-11119?

CVE-2025-11119 is classified as a cross-site scripting (XSS) vulnerability.

Can CVE-2025-11119 lead to data exposure?

Yes, CVE-2025-11119 can lead to data exposure and session hijacking due to its XSS nature.