medium4.8
CVE-2017-17828
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.
Impact
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Doditsolutions | Busbooking-Script | All versions |