Gadget Works Online Ordering System 1.0 - Cross-Site Scripting via Category Parameter
A Cross Site Scripting (XSS) vulnerabilty exists in Sourcecodester Gadget Works Online Ordering System in PHP/MySQLi 1.0 via the Category parameter in an add function in category/index.php.