CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

Code injection

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

CVE-2018-5076

CVE-2018-5076 is a Cross-Site Scripting (XSS) vulnerability affecting the Online Ticket Booking component of the Advanced Real Estate Script family. Multiple sources (NVD, Red Hat advisory, CNVD) describe an XSS flaw that can be exploited via the admin/newsedit.php news title parameter, enabling ...