CVE-2026-3819Disclosure(oretnom23 / resort_reservation_system)

LOWCVSS 5.4 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the component Reservation Management Module. Such manipulation of the argument ID leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • resort_reservation_system

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
resort_reservation_system

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-09: 3Technical Details · 2026-03-09: 303-09
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-3819 A vulnerability has been found in SourceCodester Resort Reservation System 1.0. The affected element is an unknown function of the file /?page=manage_reservation of the… https://www.cve.org/CVERecord?id=CVE-2026-3819

    Post summary

    A vulnerability (CVE-2026-3819) was reported in SourceCodester Resort Reservation System 1.0, affecting an unknown function in the manage_reservation page, but no PoC, exploit, patch, or exploitation status is detailed.

    0000092
    56.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3819 Cross-Site Scripting in SourceCodester Resort Reservation System 1.0 via Reservation Management https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3819

    Post summary

    The text announces CVE-2026-3819, an XSS flaw in SourceCodester Resort Reservation System 1.0, and links to a details page without providing exploit or patch information.

    0000055
    4.0K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-3819 - SourceCodester Resort Reservation System Reservation Management page cross site scripting Intel Report: https://ift.tt/VwmTIfK

    Post summary

    The intel alert identifies CVE‑2026‑3819 as a cross‑site scripting flaw in SourceCodester’s reservation management page, but it provides no evidence of exploitation, patches, or a PoC.

    0000031
    347 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Apporetnom23resort_reservation_system1.0--

Explore more