Kislay Kumar

A stored cross-site scripting issue exists that allows authenticated administrators to inject malicious scripts during the user creation process. By inserting JavaScript payloads into the `First Name`, `Last Name`, and `Email` fields, an attacker can execute scripts when the User List page is viewed.

A stored cross-site scripting issue exists in the Book Category feature. This allows administrators to inject malicious scripts by inserting a payload into the `Category Name` field, which executes arbitrary JavaScript code when the page is loaded.