CVE-2026-3763 - Vulnerability Analysis

Overview

code-projects Simple Flight Ticket Booking System 1.0 contains a stored XSS caused by input manipulation in showhistory.php, letting remote attackers execute scripts, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can execute scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version or apply patches to sanitize inputs in showhistory.php.

References

• https://code-projects.org/
• https://github.com/shenxianyuguitian/simple-flight-booking-XSS
• https://vuldb.com/?ctiid.349741
• https://vuldb.com/?id.349741
• https://vuldb.com/?submit.768182

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner