In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.
References
Link | Resource |
---|---|
https://www.sourcecodester.com | Third Party Advisory |
https://github.com/Ko-kn3t/CVE-2020-25272 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-10-08 06:15
Updated : 2020-10-16 09:29
NVD link : CVE-2020-25272
Mitre link : CVE-2020-25272
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
online_bus_booking_system_project
- online_bus_booking_system