Vulnerabilities > Doditsolutions > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2017-12-21 | CVE-2017-17830 | Cross-Site Request Forgery (CSRF) vulnerability in Doditsolutions BUS Booking Script Bus Booking Script has CSRF via admin/new_master.php. | 6.8 |
| 2017-12-21 | CVE-2017-17828 | Cross-site Scripting vulnerability in Doditsolutions Busbooking-Script Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter. | 4.8 |