CVE-2017-8304: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Accellion FTA devices before FTA912180. courier/1000@/oauth/playground/callback.html allows XSS with a crafted URI...