leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250113 was assigned to this vulnerability.", "datePublished": "2024-01-09T21:00:06Z", "dateModified": "2025-04-17T17:19:24Z", "keywords": "CVE-2024-0345, vulnerability, CVE, security, Vehicle Booking System, CodeAstro", "about": { "@type": "SoftwareApplication", "name": "Vehicle Booking System", "applicationCategory": "SecurityApplication", "operatingSystem": "All" } }
CVE-2024-0345 MEDIUM

CVE-2024-0345: CodeAstro Vehicle Booking System User Registration usr-register.php cross site scripting

Vendor Codeastro
Product Vehicle Booking System
Weakness CWE-79 · XSS
Published January 9, 2024
Last update April 17, 2025

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

A vulnerability, which was classified as problematic, was found in CodeAstro Vehicle Booking System 1.0. This affects an unknown part of the file usr/usr-register.php of the component User Registration. The manipulation of the argument Full_Name/Last_Name/Address with the input <script>alert(document.cookie)</script> leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250113 was assigned to this vulnerability.

Key dates

02Disclosure timeline

January 9, 2024 CVE published
April 17, 2025 Record updated