CVE-2024-46077

itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting XSS via a crafted payload to the val-username, val-email, val-suggestions, val-digits and statename parameters in travellers.php...

CVE-2024-46077

The itsourcecode Online Tours and Travels Management System v1.0 is vulnerable to Cross Site Scripting (XSS) due to improper neutralization of input during web page generation. An attacker can exploit this by sending a crafted payload to the val-username , val-email , val-suggestions , val-digits...