Biometric Shift Employee Management System has XSS via the index.php holiday_name parameter in an edit_holiday action.Referenceshttps://github.com/d4wner/Vulnerabilities-Report/blob/master/Biometric-Shift-Employee-Management-System.md
