PHP Scripts Mall Car Rental Script 2.0.8 has XSS via the User Name field in an Edit Profile action.

Link: http://feeds.security-database.com/~r/Last100Alerts/~3/XM4809H-9f8/detail.php