PaperCut MF before 18.3.6 and PaperCut NG before 18.3.6 allow script injection via the user interface, aka PC-15163.Referenceshttps://www.papercut.com/products/mf/release-history/https://www.papercut.com/products/ng/release-history/