TI-2015-02455 CVE-2015-2781 · GHSA-263p-v3xc-qhqrCross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express…Priority LOW 24Cross-site scripting (XSS) vulnerability in cgi-bin/hotspotlogin.cgi in Hotspot Express hotEx Billing Manager 73 allows remote attackers to inject arbitrary web script or HTML via the reply parameter.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0187 · Published 2015-04-14 · No fix listed CWE-79