CVE-2020-25272 – In SourceCodester Online Bus Booking System 1.0, there is XSS through the

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25272

Reference (s):

• https://github.com/Ko-kn3t/CVE-2020-25272
• https://www.sourcecodester.com