CVE-2017-17994: Improper Neutralization of Input During Web Page Generation

Biometric Shift Employee Management System has XSS via the criteria parameter in an index.php?user=competencycriteria request...