Baixijun

**Name of the Vulnerable Software and Affected Versions** SourceCodester Performance Indicator System version 1.0 **Description** A vulnerability was found in the system, affecting an unknown functionality of the file /admin/addproduct.php. The manipulation of the `prodname` argument leads to cross site scripting. The attack can be launched remotely. **Recommendations** For SourceCodester Performance Indicator System version 1.0, consider disabling access to the /admin/addproduct.php file until a patch is available. As a temporary workaround, restrict the manipulation of the `prodname` argument to minimize the risk of exploitation.