Threats Tagged 'cve-2025-63949'
View all threats tagged with 'cve-2025-63949'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-63949'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2025-63949 is a reflected Cross-Site Scripting (XSS) vulnerability found in the yohanawi Hotel Management System, specifically in the 'error' parameter of pages/room.php. This vulnerability allows remote attackers to inject and execute arbitrary web scripts in the context of the victim's browser when they visit a crafted URL. The vulnerability has a CVSS score of 6.1 (medium severity), indicating a moderate risk with potential impacts on confidentiality and integrity but no direct impact on availability. Exploitation requires user interaction, such as clicking a malicious link, and no authentication is needed. Although no known exploits are currently reported in the wild, the vulnerability poses a risk of session hijacking, credential theft, or other malicious actions leveraging script execution. European organizations using this hotel management system should be aware of this risk and implement mitigations promptly. The vulnerability affects all versions as no specific affected versions are listed. Mitigation includes input validation, output encoding, and user awareness to avoid clicking suspicious links. Join the discussion | CVE Database V5 | 12/18/2025, 00:00:00 UTC Added: 12/18/2025, 20:41:29 UTC |
Showing 1 to 1 of 1 result