CVE:CVE-2023-4111
CNNVD:CNNVD-202308-140
Bus Reservation System是PHP Jabbers开源的一个巴士预约系统。
PHP Jabbers Bus Reservation System 1.1版本存在跨站脚本漏洞，该漏洞源于文件/index.php的参数index/pickup_id会导致跨站脚写。
solution:Upgrade phpjabbers bus_reservation_system to a higher version than 1.1,and avoid the version 1.1