2025-12-18 00:00:00
mitre
PUBLISHED
A Reflected Cross-Site Scripting (XSS) vulnerability in yohanawi Hotel Management System (commit 87e004a) allows a remote attacker to execute arbitrary web script via the error parameter in pages/room.php.