Cross-site scripting (XSS) vulnerability in display.php in I, Librarian 4.10 allows remote attackers to inject arbitrary web script or HTML via the project parameter.
- https://github.com/mkucej/i-librarian/issues/138
No PoCs found on GitHub currently.