Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
A lot of offensive activities were identified targeting code-projects Online Bike Rental (CVE-2025-0339) https://vuldb.com/vuln/290826/cti
Post summary
The post indicates CVE-2025-0339 is currently being targeted by offensive actors, although specifics on the exploit or mitigation remain unspecified.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fabian | online_bike_rental_system | 1.0 | - | - |