Bookgy Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in Bookgy, an online booking and management software. This issue allows attackers to execute JavaScript in the context of the victim's browser by sending a malicious URL through the 'IDRESERVA' parameter in the '/bkg_imprimir_comprobante.php' file.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute arbitrary JavaScript in the victim's browser.

Remediation

The Bookgy team has fixed this vulnerability, and it is no longer exploitable.