Hardcoded credentials are discovered within the application's source code, creating a potential security risk for unauthorized access

A 'Cross-site Scripting' (XSS) vulnerability, characterized by improper input neutralization during web page generation, has been discovered