CVE-2026-2160: SourceCodester Simple Responsive Tourism Website Master.php cross site scripting
A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=savepackage. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2160?
CVE-2026-2160 is considered a high severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2026-2160?
To fix CVE-2026-2160, implement proper input validation and output encoding on the affected functionality in Master.php.
What software is affected by CVE-2026-2160?
CVE-2026-2160 affects SourceCodester Simple Responsive Tourism Website version 1.0.
What type of vulnerability is CVE-2026-2160?
CVE-2026-2160 is a cross-site scripting (XSS) vulnerability.
Can CVE-2026-2160 be exploited remotely?
Yes, CVE-2026-2160 can be exploited remotely by attackers to execute malicious scripts.