CVE-2018-5078

Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...

CVE-2018-5078

The CVE-2018-5078 entry concerns a Cross-Site Scripting (XSS) vulnerability in the Online Ticket Booking system, exploitable via the admin/eventlist.php cast parameter. Connected sources consistently describe XSS as the flaw and point to the same parameter as the vector, but there are no accompan...