Simple Responsive Tourism Website vulnerabilities

2 known vulnerabilities in Simple Responsive Tourism Website from SourceCodester. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Simple Responsive Tourism Website: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2026-3746Mar 8, 2026SourceCodester

  A vulnerability was determined in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /tourism/classes/Login.php?f=login of the component Login. This manipulation of the argument Username

• 9.8 Critical severity

  Simple Responsive Tourism Website: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-2848Feb 20, 2026SourceCodester

  A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Master.php?f=register of the component Registration. This manipulation of the argument Username cause