Koibox cross-site scripting vulnerabilities

Koibox is a beauty center management software from Koibox, Inc. A cross-site scripting vulnerability exists in versions prior to Koibox e8cbce2, which stems from allowing the upload of images containing malicious JavaScript, which could lead to a stored cross-site scripting attack...