Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component.Referenceshttps://gist.github.com/s4fv4n/0d7a5093886cf41d9c478166e4aeec64