Availability Booking Calendar PHP Cross Site Scripting Vulnerability

Availability Booking Calendar PHP is GZ Scripts open source an availability booking calendar system . Availability Booking Calendar PHP v1.0 version of a cross-site scripting vulnerability , the vulnerability stems from the file index.php parameter promo_code on the user-supplied data lack of effective filtering and escaping , an attacker can exploit the vulnerability by injecting a well-designed payload to execute arbitrary Web script or HTML.