A Cross-Site Scripting (XSS) vulnerability exists in myCred up to version 4.0.2 due to improper neutralization of script-related HTML tags, allowing code injection. This vulnerability has a CVSS score of 4.3, indicating medium severity. No patch or remediation information is currently provided.