CVE-2025-60308: XSS
code-projects Simple Online Hotel Reservation System 1.0 has a Cross Site Scripting (XSS) vulnerability in the Add Room function of the online hotel reservation system. Malicious JavaScript code is entered in the Description field, which can leak the administrator's cookie information when browsing this room information
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60308?
CVE-2025-60308 is classified as a medium-severity vulnerability due to its potential impact on user security.
How do I fix CVE-2025-60308?
To fix CVE-2025-60308, sanitize all user inputs in the Description field to prevent JavaScript code execution.
Who is affected by CVE-2025-60308?
CVE-2025-60308 affects users of the Simple Online Hotel Reservation System version 1.0.
What type of vulnerability is CVE-2025-60308?
CVE-2025-60308 is a Cross Site Scripting (XSS) vulnerability.
What can an attacker do with CVE-2025-60308?
An attacker exploiting CVE-2025-60308 can inject malicious JavaScript that may steal sensitive information, such as administrator cookies.