Administrator cookie theft via stored username script

Stored cross-site scripting in code-projects Client Details System 1.0 allows remote attackers to steal an administrator's cookies. The customer-add workflow stores a malicious username without neutralization and later renders it when an administrator browses the record. No privileges are required, but exploitation requires an administrator to view the crafted customer entry; the demonstrated consequence is cookie disclosure.