Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44CreditsMuhammad Ashhab Khan, u-blox Red Teamu-blox AGReferenceshttps://igs.bkg.bund.de/ntrip/bkgcasterhttps://igs.bkg.bund.de/root_ftp/NTRIP/software/NTRIPCASTER_CHANGELOG