A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.CreditsKen PyleReferenceshttps://www.digitalalertsystems.com/security-advisory