alandsilva26 CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM alandsilva26 CVE published 2026-04-14

CVE-2025-65132

CVE-2025-65132 is a Cross Site Scripting (XSS) vulnerability in the hotel-management-php 1.0 application, specifically in the /public/admin/edit_room.php file. The vulnerability allows an attacker to inject and execute arbitrary JavaScript via the room_id GET parameter. The CVSS score is 6.1, indicating a medium severity. This vulnerability can be exploited by an attacker to inject malicious JavaScript, p [truncated]