CVE-2018-5075

Online Ticket Booking has XSS via the admin/snacksedit.php snacksname parameter...