CVE-2026-13557: itsourcecode Online Hotel Management System POST Request controller.php add cross site scripting
A vulnerability was identified in itsourcecode Online Hotel Management System 1.0. This vulnerability affects unknown code of the file /admin/modroom/controller.php?action=add of the component POST Request Handler. Such manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-13557?
The severity of CVE-2026-13557 is rated medium with a score of 4.3.
How do I fix CVE-2026-13557?
To fix CVE-2026-13557, ensure input validation and sanitization for user inputs in the affected POST Request Handler.
What type of vulnerability is CVE-2026-13557?
CVE-2026-13557 is classified as a Cross Site Scripting (XSS) vulnerability.
What components are affected by CVE-2026-13557?
CVE-2026-13557 affects the POST Request Handler in the controller.php file of the itsourcecode Online Hotel Management System.
How can attackers exploit CVE-2026-13557?
Attackers can exploit CVE-2026-13557 by manipulating the argument 'Name' in a POST request to execute malicious scripts.