Cross-site Scripting (XSS)

snipe/snipe-it is vulnerable to cross-site scripting. Lack of sanitization of the user requestable results enable an attacker to inject malicious script to steal user cookie...