ExtremeControl Cross-Site Scripting Vulnerability in Login Interface

A cross-site scripting (XSS) vulnerability has been identified in ExtremeControl versions prior to 25.5.12. The issue arises in the login interface, where user input is not properly sanitized before being inserted into HTML attributes. This flaw allows attackers to inject script code that could execute in the context of the user's browser under certain conditions. Exploitation of this vulnerability could result in the unauthorized exposure of user data or the execution of unintended actions within the browser.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's session.