The IP phone might use malicious input stored in configuration parameters and render it as content for the WebUI’s webpage.Referenceshttps://support.hp.com/us-en/document/ish_15255534-15255565-16/hpsbpy04108
