Stored Cross-Site Scripting Vulnerability in PHPJabbers Cinema Booking System
CVE-2024-57428
9.3CRITICAL
Key Information:
- Vendor
PHPJabbers
- Status
- Vendor
- CVE Published:
- 6 February 2025
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-57428?
The Cinema Booking System by PHPJabbers is susceptible to a stored XSS vulnerability that arises from unsanitized user input within the file upload fields, particularly event images and seat map configurations. This flaw allows attackers to inject persistent JavaScript code, potentially leading to serious security breaches such as phishing attacks, malware delivery, and session hijacking. It is crucial for users and administrators of the affected product to apply necessary security measures and updates.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.