CVE-2019-9606: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Personal Video Collection Script 4.0.4 has Stored XSS via the "Update profile" feature...