CVE-2026-3819 - Vulnerability Analysis

Overview

SourceCodester Resort Reservation System 1.0 contains a stored XSS caused by improper sanitization of the "ID" argument in /?page=manage_reservation of Reservation Management Module, letting remote attackers execute scripts, exploit requires crafted input.

Severity & Score

Impact

Remote attackers can execute arbitrary scripts in users' browsers, potentially stealing session data or performing actions on behalf of users.

Mitigation

Update to the latest version with XSS protections or apply input sanitization and output encoding.

References

• https://www.sourcecodester.com/
• https://medium.com/@rvpipalwa/stored-cross-site-scripting-xss-in-reservation-management-sourcecodester-resort-reservation-894ee77d7312
• https://vuldb.com/?ctiid.349785
• https://vuldb.com/?id.349785
• https://vuldb.com/?submit.769578

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner