Ezequiel

The issue is related to a request for a nonexistent resource. It can be exploited via the "dwr/test/" PATH INFO, allowing for XSS attacks.

The issue allows for stored XSS via the Display Name for Station Status or Account Settings, related to the `goform/zForm save changes` `sip nick` parameter. In some cases, the password of `alphaadmin` for the admin account may be used for authentication.