CVE-2020-6955: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Cayin SMP-PRO4 devices. They allow imagepreview.html?filename= reflected XSS...