CVE-2022-35155

Bus Pass Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via the searchdata parameter. An attacker can inject malicious script that executes in the victim's browser.

The risk includes session hijacking, redirection to malicious sites, or other actions performed in the victim's context. This vulnerability can be exploited for social engineering attacks.

Update the system to the latest version or implement input filtering and encoding for the searchdata parameter. Deploy Content Security Policy (CSP).