PHPJabbers Cinema Booking System Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in PHPJabbers Cinema Booking System version 1.0. This issue resides in the 'date' parameter of the Now Showing menu, allowing attackers to execute arbitrary web scripts or HTML by injecting a crafted payload.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, log into the application and navigate to the Now Showing menu. Click on the Print option, and then inject an XSS payload into the 'date' parameter. The injected script will execute, demonstrating the cross-site scripting vulnerability.