CVE-2024-57428

PHPJabbers Cinema Booking System v2.0 is affected by a stored XSS due to unsanitized input in file uploads (event_img, seat_maps) and in seat number configurations (number[new_X] in pjActionCreate). This enables injection of persistent JavaScript for phishing, malware injection, and session hijac...

CVE-2024-57428

A stored cross-site scripting XSS vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields eventimg, seatmaps and seat number configurations numbernewX in pjActionCreate. Attackers can inject persistent JavaScript, leading to phishing, malware...