Hacktwo

**Name of the Vulnerable Software and Affected Versions** itsourcecode Courier Management System versions prior to 1.1 **Description** A flaw in the `/index.php` endpoint allows remote attackers to perform cross-site scripting (XSS) by manipulating the `page` argument. Cross-site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** Update itsourcecode Courier Management System to a version newer than 1.0. As a temporary workaround, restrict access to the `/index.php` endpoint or sanitize the `page` argument to prevent script injection.