CVE-2024-57429: Phpjabbers Cinema Booking System

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

Affected products

• Phpjabbers Cinema Booking System: version 2.0 only

Published 2025-02-06. Last modified 2026-06-17.