Code-Projects Hotel Reservation System: Reflected XSS in room param (CWE-79)

Key Vulnerability Information Summary Overview Vulnerability Name: Reflected Cross-Site Scripting (Reflected XSS) in the parameter of the Hotel and Tourism Reservation System Vulnerability Type: Reflected XSS (Reflected Cross-Site Scripting) CWE: CWE-79 – Failure to Neutralize User Input in Web Pages OWASP Top 10: A03.2021 – Injection Severity: Medium CVSS v3.1 Score: 6.1 (Medium) Product: Hotel and Tourism Reservation System (PHP-based) Vendor: Code-Projects Affected Endpoint: Vulnerable Parameter: Scope of Impact The parameter is intended to accept a room identifier, but the application fails to perform context-aware encoding on the input, directly inserting the user-controllable value into the HTML response. An attacker can craft a malicious URL to induce the victim to visit it; once accessed, the browser executes the injected as JavaScript. Successful exploitation allows arbitrary JavaScript execution in the victim's browser, which may lead to session hijacking, information disclosure, or the execution of client-side scripts. Remediation Implement strict server-side validation for the parameter (e.g., restricting it to numeric room numbers). Perform context-aware HTML encoding of special characters ( , , , , , etc.) before outputting to HTML. Avoid trusting URL parameters as HTML content directly. Suggested fix: reject non-numeric values or apply HTML entity encoding to the output. POC / Exploit Code Test Payload: Full HTTP Request: ``` GET /nt/details.php?room=5hqp%2N2%8c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c%28c

Goal Reached Thanks to every supporter — we hit 100%!

Code-Projects Hotel Reservation System: Reflected XSS in room param (CWE-79)

More from this source