KNIME Server before 4.13.4 allows XSS via the old WebPortal login page.Referenceshttps://docs.knime.com/2021-06/server_update_guide/index.html#_bugfixeshttps://zigrin.com/advisories/knime-server-dom-based-xss-in-a-login-panel/