CVE-2023-6774

CodeAstro POS and Inventory Management System 1.0 contains an XSS vulnerability in /accounts_con/register_account. The Username parameter can be injected with a script tag () to execute arbitrary script in the victim’s browser. Exploitation is possible remotely and the public disclosure of the ex...