Vulnerabilities > Mage People > BUS Ticket Booking With Seat Reservation > 1.3.1

DATE CVE VULNERABILITY TITLE RISK
2023-11-22 CVE-2023-30496 Cross-site Scripting vulnerability in Mage-People BUS Ticket Booking With Seat Reservation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MagePeople Team WpBusTicketly plugin <= 5.2.5 versions.
network
low complexity
mage-people CWE-79
6.1
2023-08-02 CVE-2023-4067 Unspecified vulnerability in Mage-People BUS Ticket Booking With Seat Reservation
The Bus Ticket Booking with Seat Reservation plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab_date' and 'tab_date_r' parameters in versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping.
network
low complexity
mage-people
6.1