https://gkaim.com/cve-2018-6904-vikas-chaudhary/
CVE-2018-6904-PHP Scripts Mall Car Rental Script 2.0.8 has HTML injection.