CVE-2026-11338 | BDVDB-2026-338205 Detail
SourceCodesterShip Ferry Ticket Reservation System
Description#
A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.0. Impacted is an unknown function of the file /admin/?page=user/manage_user. The manipulation of the argument Username leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact low, availability impact none. Attack vector: network.
Weaknesses#
References#
- https://vuldb.com/vuln/368880
- https://vuldb.com/vuln/368880/cti
- https://vuldb.com/cve/CVE-2026-11338
- https://vuldb.com/submit/832571
- https://medium.com/@hemantrajbhati5555/stored-cross-site-scripting-stored-xss-in-username-field-leads-to-arbitrary-javascript-execution-cd377841da30
- https://www.sourcecodester.com/
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.