CVE-2019-7554 – An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.

An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7554

Reference (s):

• https://securityhitlist.blogspot.com/2019/02/cve-2019-7554-reflected-xss-in-api.html
• https://www.phpscriptsmall.com