CVE-2024-42761

A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...

CVE-2024-42761: Improper Neutralization of Input During Web Page Generation

A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...

CVE-2024-42761

A Stored Cross Site Scripting (XSS) vulnerability exists in the Kashipara Bus Ticket Reservation System v1.0 within the /admin_schedule.php endpoint. The root cause is the lack of effective filtering and escaping of user-supplied data, specifically via the scheduleDurationPHP parameter. Remote at...

CVE-2024-42761

A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...