Sourcecodester Online Market Place Site 1.0 is vulnerable to Cross Site Scripting (XSS), allowing attackers to register as a Seller then create new products containing XSS payloads in the 'Product Title' and 'Short Description' fields.
https://www.sourcecodester.com/php/15273/online-market-place-site-phpoop-free-source-code.html