Alokjaiswal Hotel Management Services Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in Alokjaiswal Hotel Management Services versions through 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f. The issue resides in an unknown function within the file '/usersub.php', part of the Request Pending Page component. This vulnerability can be exploited remotely, and a public exploit is available.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

The vulnerability can be reproduced by sending a request to the '/usersub.php' page with crafted input that is not properly sanitized. This input will be reflected back to users, executing the injected script and demonstrating the cross-site scripting flaw.