Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter.Referenceshttps://github.com/spotweb/spotwebhttps://github.com/spotweb/spotweb/issues/711