CVE-2025-57145: XSS
A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the backend and executed when a user or administrator accesses the affected report page. This allows attackers to exfiltrate session cookies, hijack user sessions, and perform unauthorized actions in the context of the victims browser.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-57145?
CVE-2025-57145 is classified as a medium severity vulnerability due to its potential for cross-site scripting attacks.
How do I fix CVE-2025-57145?
To fix CVE-2025-57145, ensure that all user input submitted through the search-autootaxi.php endpoint is properly sanitized and validated.
What software is affected by CVE-2025-57145?
CVE-2025-57145 affects version 1.0 of the Phpgurukul Auto Taxi Stand Management System.
Can CVE-2025-57145 be exploited remotely?
Yes, CVE-2025-57145 can be exploited remotely, enabling attackers to execute arbitrary JavaScript in users' browsers.
What are the potential impacts of exploiting CVE-2025-57145?
Exploiting CVE-2025-57145 could allow attackers to steal sensitive information, perform phishing attacks, or manipulate user sessions.