Online Fire Reporting System is an online fire reporting system from Carlo Montero’s personal developer. Online Fire Reporting System v1.0 is vulnerable to a cross-site scripting vulnerability that originates in /ofrs/classes/Master.php due to a lack of data validation of user-supplied The vulnerability stems from a lack of data validation filtering of user-supplied data and output, which can be exploited by attackers to execute JavaScript code on the client side.