Elcomplus SmartPTT is vulnerable when an attacker injects JavaScript code into a specific parameter that can executed upon accessing the dashboard or the main page.CreditsMichael Heinzl reported these vulnerabilities to CISAReferenceshttps://www.cisa.gov/uscert/ics/advisories/icsa-22-109-04