Security Advisory
CVE-2021-24283
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.