Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.
- https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md
No PoCs found on GitHub currently.