CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.

Source: CVE-2017-17828