CVE-2024-7814: Online Railway Reservation System Project Online Railway Reservation System

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_addr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Published 2024-08-15. Last modified 2026-06-17.