Arox School ERP Pro v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the dispatchcategory parameter in backoffice.inc.php.Referenceshttps://www.arox.inhttps://github.com/JC175/CVE-2022-32118
