CVE-2020-19762: Improper Neutralization of Input During Web Page Generation

Automated Logic Corporation ALC WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request...