CVE-2023-34486

MediumCVSS 6.1

Published: 29/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.60%

44th percentile - higher than 44% of all known CVEs

Summary

The Online Hotel Management System Project in PHP version 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.

Risk Assessment

An attacker could exploit this vulnerability to execute malicious code on the server, potentially leading to data loss or system takeover.

Recommendation

It is recommended to update the system to the latest version and implement input validation to prevent XSS attacks.

Original NVD description (English source)

itsourcecode Online Hotel Management System Project In PHP v1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote code execution can be achieved by entering malicious code in the date selection box.