CVE-2019-25265 — Online Inventory Manager 3.2 contains a stored cross-site scripting vulnerability in the group description field of the admin edit groups section. Attackers can inject malicious JavaScript through the — CVE Database · The Intelligence Room