Busbooking Script
1 CVEs
product
Monthly
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
XSS
Busbooking Script
Doditsolutions
NVD
GitHub
CVSS 3.1
4.8
EPSS
0.2%
EPSS 0%
CVSS 4.8
MEDIUM
POC
This Month
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
PHP
XSS
Busbooking Script
+1
NVD
GitHub