PT-2021-14369

Name of the Vulnerable Software and Affected Versions: Online Invoicing System OIS version 4.0 Description: The issue is related to a stored XSS in the Online Invoicing System, which can allow an attacker to take over the admin account. This is achieved through a payload that extracts a csrf toke...