Itsourcecode Free Hotel Reservation System vulnerabilities

7 CVEs affecting Itsourcecode Free Hotel Reservation System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-5551, published 2026-04-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-3730, published 2026-03-08. Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /hotel/admin/mod_amenities/index.php?view=edit.…
CVE-2026-4237, published 2026-03-16. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/mod_reports/index.php. Executing a manipulation of the…
CVE-2026-5551, published 2026-04-05. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0. This vulnerability affects unknown code of the file /hotel/admin/login.php of the component Parameter Handler.…
CVE-2026-4612, published 2026-03-23. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in itsourcecode Free Hotel Reservation System 1.0. This affects an unknown part of the file /hotel/admin/mod_users/index.php?view=edit&id=8 of the component Parameter…
CVE-2026-4875, published 2026-03-26. Medium severity, CVSS 4.7. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of…
CVE-2026-4966, published 2026-03-27. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw has been found in itsourcecode Free Hotel Reservation System 1.0. Impacted is an unknown function of the file /admin/mod_room/index.php?view=edit. Executing a manipulation of the argument ID…
CVE-2026-4876, published 2026-03-26. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0. The impacted element is an unknown function of the file /admin/mod_amenities/index.php?view=editpic. Such…