Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.Referenceshttps://angtech.org/product/view/3https://angtech.orghttps://github.com/bigzooooz/CVE-2022-31299