The issue is related to a Cross-Site Scripting (XSS) problem. It is caused by the `match names` parameter. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.