The parameter q is affected by Cross-site Scripting in jobcard-ongoing.php in EasyService Billing 1.0.
easyservice billing project easyservice billing 1.0