Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: magepeopleteam Component: Bus Ticket Booking With Seat Reservation Clear all filters
TI-2024-29574 CVE-2024-43985 · GHSA-v7w5-cp9x-mh33

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in MagePeople Team Bus Ticket Booking with Seat Reservation allows Stored XSS.This issue affects Bus Ticket Bookin…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-09-17 No fix listed CWE-79
TI-2023-03772 CVE-2023-4067 · GHSA-qj8q-g9v2-j5rg

Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting

Priority LOW 28

The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00433 Published 2023-08-02 No fix listed CWE-79