Simple Invoice 2011 Cross Site Scripting

Affected software: simple invoice Type of vulnerability:stored xss URL:simpleinvoices.org Discovered by: provensec Website: provensec.com version:2011 Proof of concept goto http://demo.simpleinvoices.org/index.php?module=paymenttypes&view=manage add new or edit some older payment type and fill th...