CVE-2025-2377

Summary

CVE-2025-2377 is a recently disclosed vulnerability affecting the SourceCodester Vehicle Management System 1.0. This issue lies in an unspecified functionality of the file /confirmbooking.php. An attacker can exploit this cross-site scripting (XSS) vulnerability by manipulating the id argument. The attack can be launched remotely, making it a significant threat. The exploit has been made public, increasing the risk of widespread exploitation. Initial researcher advisories have reported conflicting product names, adding to the confusion surrounding this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.