CVE-2026-13554

⚪ Do wiadomości

Wstrzyknięcie skryptu w Online Hotel Management System umożliwia atak XSS zdalnie.

CVSS
4.3
EPSS
0.0%
Exploit
none
Vendor
Opis źródłowy (NVD)

A vulnerability has been found in itsourcecode Online Hotel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/mod_amenities/controller.php?action=add of the component POST Request Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

xss Brak patcha
Źródła i daty
ŹródłoWartość
NVD – CVSS4.3
CISA KEV (aktywnie wykorzystywane)Nie
FIRST EPSS (prawdopodobieństwo exploita)0.0%
Opublikowano (NVD)2026-06-29 10:16:29 UTC
Ostatnia modyfikacja (NVD)2026-06-29 18:41:05 UTC
Referencje