Medium · 5.4 CVE-2024-42763 EUVD-2024-39768GHSA-5pvf-fc2q-jq4q

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v…

Published Aug 22, 2024 · Updated Aug 23, 2024 · Assigned by mitre

Description

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate" parameter.

References

https://www.kashipara.com/
https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/Reflected%20XSS%20-%20Book%20Ticket.pdf