A vulnerability, which was classified as critical, has been found in itsourcecode Free Hotel Reservation System 1.0. The affected element is an unknown function of the file /admin/mod_amenities/index.php?view=add. This manipulation of the argument image causes unrestricted upload.
This vulnerability is tracked as CVE-2026-4875. The attack is possible to be carried out remotely. Moreover, an exploit is present.
