CVE-2026-2160 : faille moyenne oretnom23 simple responsive tourism… (CVSS 6.1)

A vulnerability has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Master.php?f=save_package. The manipulation of the argument Title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Sévérité

Moyenne (CVSS 6.1)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitation active

Non signalée par la CISA

Publication

8 févr. 2026

Dernière mise à jour

17 juin 2026

• oretnom23 simple responsive tourism website

• Fiche CVE-2026-2160 sur le NVD (NIST)
• github.com/CH0ico/CVE_choco_6/blob/main/report.md
• vuldb.com/
• vuldb.com/
• vuldb.com/
• sourcecodester.com/