Everpingo

**Name of the Vulnerable Software and Affected Versions** I, Librarian version 4.10 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `project` parameter in the display.php file. **Recommendations** For I, Librarian version 4.10, consider restricting access to the display.php file until a patch is available, and avoid using the `project` parameter in this file to minimize the risk of exploitation.