Unknown · Codeastro Pos/Inventory Management System · CVE-2023-6774
**Name of the Vulnerable Software and Affected Versions**
CodeAstro POS and Inventory Management System version 1.0
**Description**
A vulnerability was found in the system, classified as problematic, affecting some unknown functionality of the file /accounts con/register account. The manipulation of the `Username` argument with malicious input, such as `<script>alert(document.cookie)</script>`, leads to cross-site scripting. The attack can be launched remotely.
**Recommendations**
For CodeAstro POS and Inventory Management System version 1.0, as a temporary workaround, consider restricting access to the `/accounts con/register account` file until a patch is available. Avoid using the `Username` argument in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.