CVE-2025-25776: XSS
Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25776?
The severity of CVE-2025-25776 is classified as medium due to the potential for Cross-Site Scripting attacks that could be exploited by attackers.
How do I fix CVE-2025-25776?
To fix CVE-2025-25776, validate and sanitize user input to prevent XSS, especially in the Full Name and Address fields during registration or profile editing.
What systems are affected by CVE-2025-25776?
CVE-2025-25776 affects the Codeastro Bus Ticket Booking System v1.0 in its User Registration and User Profile features.
What are the risks associated with CVE-2025-25776?
The risks associated with CVE-2025-25776 include unauthorized script execution, data theft, and user session hijacking due to XSS vulnerabilities.
How can I test for CVE-2025-25776 in my application?
To test for CVE-2025-25776, attempt to inject JavaScript code into the Full Name and Address fields during user registration or profile editing and observe the application's response.