An input neutralization vulnerability in the Server MOTD component of Crafty Controller allows a remote, unauthenticated attacker to perform stored XSS via server MOTD modification.
Credits
Thank you to [Rozza / rchar](https://gitlab.com/rchar) on GitLab for reporting this issue.