CVE-2023-3309 LOW

CVE-2023-3309: SourceCodester Resort Reservation System Manage Room Page ?page=rooms cross site scripting

Vendor Sourcecodester
Product Resort Reservation System
Weakness CWE-79 · XSS
Published June 18, 2023
Last update December 18, 2024
View on NVD All CVEs

CVSS base score

3.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.

Key dates

02Disclosure timeline

June 18, 2023 CVE published
December 18, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-35212 OpenCTI has XSS in the rendering of email-message observable body data CVE-2026-47973 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-46891 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2025-61597 Emlog Pro is vulnerable to stored XSS attack through HTML template injection CVE-2024-3588 Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'