Multi-Purpose Inventory Management System Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in the Multi-Purpose Inventory Management System. This issue arises from inadequate validation of user input, allowing remote users to send crafted POST requests via the product_name parameter in the /Controller_Products/update endpoint. As a result, an authenticated user could have their session cookies stolen.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user.