Vendor
WP Inventory Manager (from n/a through 2.5.9) is affected by a Reflected Cross-site Scripting vulnerability due to improper neutralization of input during web page generation.