CVE-2023-49271

5.4 mediumEPSS 0.4%

Medium (5.4) in jayesh hotel management system. EPSS 0.4% chance of exploitation in the next 30 days.

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_out_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 32% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2023-12-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

jayesh:hotel_management_system

References

https://fluidattacks.com/advisories/lang/
https://www.kashipara.com/
https://fluidattacks.com/advisories/lang/
https://www.kashipara.com/

Check your stack JSON