Vulnerability Description
A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the backend and executed when a user or administrator accesses the affected report page. This allows attackers to exfiltrate session cookies, hijack user sessions, and perform unauthorized actions in the context of the victims browser.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Phpgurukul | Auto Taxi Stand Management System | 1.0 |
Related Weaknesses (CWE)
References
- http://auto.comNot Applicable
- http://phpgurukul.comProduct
- https://github.com/nandanacp/CVE-Collection/blob/main/CVE-2025-57145/README.mdThird Party Advisory
- https://github.com/nandanacp/CVE-Collection/blob/main/CVE-2025-57145/README.mdThird Party Advisory
FAQ
What is CVE-2025-57145?
CVE-2025-57145 is a vulnerability with a CVSS score of 5.4 (MEDIUM). A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form fiel...
How severe is CVE-2025-57145?
CVE-2025-57145 has been rated MEDIUM with a CVSS base score of 5.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-57145?
Check the references section above for vendor advisories and patch information. Affected products include: Phpgurukul Auto Taxi Stand Management System.