Money Transfer Management System Version 1.0 allows an attacker to inject JavaScript code in the URL and then trick a user into visit the link in order to execute JavaScript code.Referenceshttps://fluidattacks.com/advisories/charles/