Chaos4

**Name of the Vulnerable Software and Affected Versions** itsourcecode Loan Management System version 1.0 **Description** A cross site scripting issue exists in the `navbar.php` file. A remote attacker can execute the attack by manipulating the `page` argument, which allows the injection of malicious scripts into the web page. **Recommendations** As a temporary mitigation, restrict or sanitize the input of the `page` argument in the `navbar.php` file. At the moment, there is no information about a newer version that contains a fix for this vulnerability.