Car-Booking-System-PHP version 1.0 contains a Cross Site Scripting (XSS) vulnerability in the /carlux/booking.php script. This vulnerability allows an attacker to inject malicious scripts that may be executed in the context of a user's browser session. The vulnerability has a CVSS 3.1 base score of 5.4, indicating a medium severity level.