CVE-2018-11133: Improper Neutralization of Input During Web Page Generation

The 'fmt' parameter of the '/common/runcrossreport.php' script in the the Quest KACE System Management Appliance 8.0.318 is vulnerable to cross-site scripting...