CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...