Lucene search
WpvulndbWPVDB-ID:0472A858-B7E2-44E4-9A50-3C55ADE396EEHistoryAug 02, 2023 - 12:00 a.m.
Bus Ticket Booking with Seat Reservation < 5.2.4 - Reflected XSS
2023-08-0200:00:00
wpscan.com
13
xss
cross-site scripting
security
plugin
vulnerability
seat reservation
bus ticket
admin
Description The plugin does not sanitise and escape the tab_date and tab_date_r parameters before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
| CPE | Name | Operator | Version |
|---|---|---|---|
| bus-ticket-booking-with-seat-reservation | eq | 5.2.4 |
Related
cve
cve
CVE-2023-4067
2023-08-02 09:15:14
prion
prion
Cross site scripting
2023-08-02 09:15:00
cvelist
cvelist
CVE-2023-4067
2023-08-02 08:35:29
nvd
nvd
CVE-2023-4067
2023-08-02 09:15:14
wordfence
wordfence
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
24.0%
Related for WPVDB-ID:0472A858-B7E2-44E4-9A50-3C55ADE396EE