Security Advisory
CVE-2024-42761
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter.