Name of the Vulnerable Software and Affected Versions:
QCMS version 3.0
Description:
The issue allows for XSS via the `webname` parameter to the "/backend/system.html" API endpoint.
Recommendations:
For QCMS version 3.0, update to a version that includes a fix for this issue, if available. As a temporary workaround, consider restricting access to the "/backend/system.html" endpoint or avoiding the use of the `webname` parameter until a patch is available.