CVE-2023-29623: Improper Neutralization of Input During Web Page Generation

Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the password parameter at /purchaseorder/classes/login.php...