PHPGurukul Complaint Management System Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in PHPGurukul Complaint Management System version 2.0. The issue arises in the 'between-date-userreport.php' file, where the 'fromdate' and 'todate' parameters can be manipulated to inject JavaScript code.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

To reproduce this vulnerability, navigate to the 'between-date-userreport.php' page and include a script payload in the 'fromdate' and 'todate' parameters. The injected script will be executed, demonstrating the cross-site scripting vulnerability.