Cross Site Scripting vulnerability in Lost and Found Information System 1.0 allows a remote attacker to escalate privileges via the page parameter to php-lfis/admin/index.php.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')