A stored Cross-Site Scripting (XSS) vulnerability exists in version 1.0 of the Expense Management System application that allows for arbitrary execution of JavaScript commands through index.php.
CPE | Name | Operator | Version |
---|---|---|---|
expense_management_system | eq | 1.0 |