<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: bus ticket reservation system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-42763: A Reflected Cross Site Scripting (XSS) vulnerability was found in the &quot;/schedule.php&quot; page of the Kashipara Bu</title><link>https://patchthecve.com/cve/CVE-2024-42763.html</link><guid>https://patchthecve.com/cve/CVE-2024-42763.html</guid><pubDate>Wed, 17 Jun 2026 07:49:57 +0000</pubDate><description>MEDIUM 5.4: A Reflected Cross Site Scripting (XSS) vulnerability was found in the &quot;/schedule.php&quot; page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the &quot;bookingdate&quot; parameter.</description></item><item><title>CVE-2024-42762: A Stored Cross Site Scripting (XSS) vulnerability was found in &quot;/history.php&quot; in Kashipara Bus Ticket Reservat</title><link>https://patchthecve.com/cve/CVE-2024-42762.html</link><guid>https://patchthecve.com/cve/CVE-2024-42762.html</guid><pubDate>Wed, 17 Jun 2026 07:49:57 +0000</pubDate><description>MEDIUM 5.4: A Stored Cross Site Scripting (XSS) vulnerability was found in &quot;/history.php&quot; in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields.</description></item><item><title>CVE-2024-42761: A Stored Cross Site Scripting (XSS) vulnerability was found in &quot;/admin_schedule.php&quot; in Kashipara Bus Ticket R</title><link>https://patchthecve.com/cve/CVE-2024-42761.html</link><guid>https://patchthecve.com/cve/CVE-2024-42761.html</guid><pubDate>Wed, 17 Jun 2026 07:49:56 +0000</pubDate><description>MEDIUM 6.1: A Stored Cross Site Scripting (XSS) vulnerability was found in &quot;/admin_schedule.php&quot; in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter.</description></item></channel></rss>