A Cross-Site Scripting (XSS) vulnerability exists in myCred up to version 4.0.2 due to improper neutralization of script-related HTML tags, allowing code injection. This vulnerability has a medium severity with a CVSS score of 4.3. No official patch or remediation details are provided in the available data.