Water Management System version 1.0 contains a Cross Site Scripting (XSS) vulnerability in the /edit_product.php?id=1 endpoint. This vulnerability allows an attacker to inject malicious scripts that can be executed in the context of a user's browser session when interacting with this page.