CVE-2017-17828 Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.

MediumCVSS 4.8 EPSS 0.54%

Description

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.

Product	Affected versions	Fixed in
doditsolutions busbooking-script	All versions	No fix listed

4.8 Medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

All scores (2)

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.