Is CVE-2026-116514 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116514?

CVE-2026-116514 has a CVSS v3 severity of MEDIUM (4.3).

Back

CVE-2026-116514

Description

A weakness has been identified in itsourcecode Airline Reservation System 1.0. This affects an unknown part of the file /book_flight.php. Executing a manipulation of the argument max can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.