CVE-2025-57145
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-09-16

Last updated on: 2025-10-08

Assigner: MITRE

Description
A cross-site scripting (XSS) vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the backend and executed when a user or administrator accesses the affected report page. This allows attackers to exfiltrate session cookies, hijack user sessions, and perform unauthorized actions in the context of the victims browser.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-09-16
Last Modified
2025-10-08
Generated
2026-06-16
AI Q&A
2025-09-16
EPSS Evaluated
2026-06-15
NVD
CVE-2025-57145
EUVD
EUVD-2025-29624
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
phpgurukul auto_taxi_stand_management_system 1.0
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-79 The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a cross-site scripting (XSS) issue in the search-autootaxi.php endpoint of the ATSMS web application. It occurs because the application does not properly sanitize user input submitted through a form field, allowing attackers to inject malicious JavaScript code. This code is stored on the backend and executed when a user or administrator views the affected report page.

Impact Analysis

The vulnerability can allow attackers to steal session cookies, hijack user sessions, and perform unauthorized actions within the victim's browser context. This can lead to compromised user accounts and unauthorized access to sensitive information or functionality.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-57145. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart