CVE-2021-44317

In Bus Pass Management System v1.0, parameters 'pagedes' and About Us are affected with a Stored Cross-site scripting vulnerability...

CVE-2021-44317

Bus Pass Management System v1.0 is affected by a Stored Cross-Site Scripting vulnerability in the pagedes and About Us parameters due to lack of input validation/filtering. The root cause is unvalidated user input stored and later reflected to clients, enabling arbitrary JavaScript execution in t...