Untis WebUntis before 2020.9.6 allows XSS in multiple functions that store information.Referenceshttps://help.untis.at/hc/en-150/articles/360008456699https://robin.meis.space/2020/03/11/notenmanipulation-in-elektronischen-klassenbuchern/