CVE-2026-13554

Name of the Vulnerable Software and Affected Versions itsourcecode Online Hotel Management System version 1.0

Description A remote cross site scripting issue exists in the POST Request Handler component. The flaw occurs when the Name argument is manipulated within the '/admin/mod amenities/controller.php?action=add' endpoint. Cross site scripting is a technique where malicious scripts are injected into trusted websites.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the Name parameter in the '/admin/mod amenities/controller.php?action=add' endpoint until the issue is resolved.