CVE-2017-17938

The CVE-2017-17938 vulnerability affects PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) flaw exploitable through the admin/viewtheatre.php theatreid parameter, likely allowing an attacker to inject arbitrary script via this input. The connected sources consiste...

CVE-2017-17940

CVE-2017-17940 concerns PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) vulnerability in the admin/sitesettings.php page caused by unsafely handling the title parameter. The exploit path is user-controlled input reflected in the title field, enabling an attacker...