CVE-2023-49270: Jayesh Hotel Management System

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Hotel Management v1.0 is vulnerable to multiple authenticated Reflected Cross-Site Scripting vulnerabilities. The 'check_in_date' parameter of the reservation.php resource is copied into the HTML document as plain text between tags. Any input is echoed unmodified in the application's response.

Affected products

• Jayesh Hotel Management System: version 1.0 only

Published 2023-12-20. Last modified 2026-06-17.