Stephen30

**Name of the Vulnerable Software and Affected Versions** amirsanni mini-inventory-and-sales-management-system versions up to 81bf0b55f5933f3b0dbb1583204a612e06605b95 **Description** A cross site scripting issue exists within the Items Management Module in the file application/controllers/Items.php. Remote exploitation is possible by manipulating the `itemName` argument, which allows the execution of malicious scripts in the victim's browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.