Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.Referenceshttps://www.advantech.com/supporthttps://github.com/ethancsyang/CveProject/tree/main/CVE-2021-34540