CVEvulnerability

CVE-2025-25776

5.0 MEDIUM Published 2025-04-28 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-04-28
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 5.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses: CWE-79

Description

Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing.

Affected configurations

• codeastro bus ticket booking system 1.0

Weakness · CWE (1)

CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References

https://codeastro.com/bus-ticket-booking-system-in-php-codeigniter-with-source-code/ Product
https://github.com/arunmodi/Vulnerability-Research/tree/main/CVE-2025-25776 Exploit, Third Party Advisory

CVE-2025-25776

Description

Affected configurations

Related

Weakness · CWE (1)

References