PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS as demonstrated by the category and CategoryCode parameters in add-category.php the CompanyName parameter in add-company.php and the ProductName parameter in add-product.php.