CVE-2026-2159: SourceCodester Simple Responsive Tourism Website Registration Master.php cross site scripting
A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected is an unknown function of the file /tourism/classes/Master.php?f=register of the component Registration. Executing a manipulation of the argument firstname/lastname/username can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2159?
CVE-2026-2159 has been classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2026-2159?
To fix CVE-2026-2159, sanitize and validate all user input in the affected registration component to prevent XSS.
What components are affected by CVE-2026-2159?
CVE-2026-2159 affects the registration functionality in the SourceCodester Simple Responsive Tourism Website version 1.0.
What type of attack can CVE-2026-2159 lead to?
CVE-2026-2159 can lead to cross-site scripting (XSS) attacks that may compromise user data and site integrity.
Is CVE-2026-2159 easy to exploit?
Yes, CVE-2026-2159 is relatively easy to exploit due to the inadequate input validation in the affected component.