Yohanawi vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Yohanawi products: 1 record(s), with severity, exploitation and fixes.

Hotel Management System 1

Exploited only (KEV) →

CVE-2025-63949 Medium · 6.1 CWE-79 Dec 18, 2025

Cross-site Scripting (XSS) in Yohanawi Hotel Management System

A Reflected Cross-Site Scripting (XSS) vulnerability in yohanawi Hotel Management System (commit 87e004a) allows a remote attacker to execute arbitrary web script via the 'error' parameter in pages/room.php.