Cross Site Scripting Vulnerability in Car Booking System by Sanin Technologies
CVE-2025-63450

5.4MEDIUM

Key Information:

Vendor

Sanin Technologies

Status
Car-Booking-System-PHP
Vendor
CVE Published:
3 November 2025

What is CVE-2025-63450?

The Car-Booking-System-PHP version 1.0 is susceptible to Cross Site Scripting (XSS) attacks due to insufficient input validation in the /carlux/booking.php script. This vulnerability may allow attackers to inject malicious scripts into web pages viewed by other users, potentially compromising sensitive information or hijacking user sessions. It is crucial for users and administrators to patch this vulnerability to safeguard their systems.

References

https://www.linkedin.com/in/shuvo-ahmed-sanin/
https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-11

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-63450 : Cross Site Scripting Vulnerability in Car Booking System by Sanin Technologies