A vulnerability labeled as critical has been found in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the file /admin/roombook.php. Such manipulation of the argument rid leads to sql injection.

This vulnerability is uniquely identified as CVE-2025-12857. The attack can be launched remotely. Moreover, an exploit is present.