Code-Projects Hotel And Tourism Reservation System vulnerabilities

4 CVEs affecting Code-Projects Hotel And Tourism Reservation System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-11342, published 2026-06-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-10288, published 2026-06-01. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was identified in code-projects Hotel and Tourism Reservation System 1.0. This issue affects the function password_verify of the file /admin/login.php of the component Admin Login.…
CVE-2026-10289, published 2026-06-01. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A security flaw has been discovered in code-projects Hotel and Tourism Reservation System 1.0. Impacted is an unknown function of the file /ht/tour.php. Performing a manipulation of the argument name…
CVE-2026-10290, published 2026-06-01. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A weakness has been identified in code-projects Hotel and Tourism Reservation System 1.0. The affected element is an unknown function of the file tour.php of the component GET Parameter Handler.…
CVE-2026-11342, published 2026-06-05. High severity, CVSS 7.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in code-projects Hotel and Tourism Reservation System 1.0. This affects an unknown function of the file /details.php. Such manipulation of the argument room leads to…