Security Advisory
CVE-2020-36954
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Xeroneit Library Management System 3.1 contains a stored cross-site scripting vulnerability in the Book Category feature that allows administrators to inject malicious scripts. Attackers can insert a payload in the Category Name field to execute arbitrary JavaScript code when the page is loaded.