Medium severity6.1NVD Advisory· Published Dec 18, 2025· Updated Oct 13, 2026
CVE-2025-63949
CVE-2025-63949
Description
A Reflected Cross-Site Scripting (XSS) vulnerability in yohanawi Hotel Management System (commit 87e004a) allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:yohanawi:hotel_management_system:2022-05-22:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:yohanawi:hotel_management_system:2022-05-22:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)
Patches
Vulnerability mechanics
References
2- github.com/solonbarroso/vulnerability-research/blob/main/advisories/Hotel-Management-System/CVE-2025-63949.mdnvdExploitThird Party Advisory
- github.com/solonbarroso/vulnerability-research/blob/main/advisories/Hotel-Management-System/CVE-pending-XSS.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.