Security Advisory

CVE-2024-42761

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-08-22 00:00:00
Last updated 2024-08-23 14:13:16
Assigner mitre
State PUBLISHED

Description

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter.