CVE-2025-7800 - CVE House
Back to Database
Status published Medium CVE-2025-7800

cgpandey hotelmis HTTP GET Request admin.php cross site scripting

Vulnerability Description

A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e. This vulnerability affects unknown code of the file admin.php of the component HTTP GET Request Handler. The manipulation of the argument Search leads to cross site scripting. The attack can be initiated remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7800

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • dev03303 (VulDB User)

Affected Vendor

Affected Software

hotelmis
Vulnerable Versions:
c572198e6c4780fccc63b1d3e8f3f72f825fc94e

Timeline

Official Publish: July 18th, 2025
Last Modified: July 18th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:X/RC:R

Weaknesses (CWE)