OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability the attacker needs to manipulate the name of some device on your computer such as a printer replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).