**Ketemu celah potensi injection (melalui XSS) dengan kode:**
`/index.php/'"--><script>alert('gembel')</script></index.php?p=profil-singkat`

Hasilnya adalah pop-up alert. Silakan diperiksa.
XSS Injection
This is a GitHub Issue
repo:slims9_bulian
owner:slims
Title : XSS Injection
Issue date:

--- start body ---
**Ketemu celah potensi injection (melalui XSS) dengan kode:**
`/index.php/'"--><script>alert('gembel')</script></index.php?p=profil-singkat`

Hasilnya adalah pop-up alert. Silakan diperiksa.
--- end body ---

The issue describes a potential Cross-Site Scripting (XSS) vulnerability in the application. The provided code snippet demonstrates that an attacker can inject a script tag into the URL, which results in a pop-up alert when executed. This indicates that user input is not properly sanitized, allowing for the execution of arbitrary JavaScript code in the context of the user's browser.