CVE-2008-0774: Loris Hotel Reservation System

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotel_name parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

• Loris Hotel Reservation System: up to and including 3.01

Published 2008-02-14. Last modified 2026-06-16.