Accounting Journal Management Cross-Site Scripting Vulnerability

Accounting Journal Management is a simple PHP-based accounting journal management system with a trial balance. accounting Journal Management version 1.0 is vulnerable to a cross-site scripting vulnerability that stems from a lack of filtering of user-supplied data and The vulnerability is caused by a lack of data validation filtering of user-supplied data and output in the user list parameter manage_user. An attacker could exploit this vulnerability to attack the system by using a session that is already owned on or off the network.