CVE-2021-44726: Improper Neutralization of Input During Web Page Generation

KNIME Server before 4.13.4 allows XSS via the old WebPortal login page...