Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker.
CVSS 3.1MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00392·Published 2023-02-13·Fixed in 2.8CWE-79