GHSA-34gp-5c7w-p6jrLowCVSS 2.4
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System...
🔗 CVE IDs covered (1)
📋 Description
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
🔗 References (8)
- https://nvd.nist.gov/vuln/detail/CVE-2026-11338
- https://medium.com/@hemantrajbhati5555/stored-cross-site-scripting-stored-xss-in-username-field-leads-to-arbitrary-javascript-execution-cd377841da30
- https://vuldb.com/cve/CVE-2026-11338
- https://vuldb.com/submit/832571
- https://vuldb.com/vuln/368880
- https://vuldb.com/vuln/368880/cti
- https://www.sourcecodester.com
- https://github.com/advisories/GHSA-34gp-5c7w-p6jr