description: Characters in the GET url path are not properly escaped and can be reflected in the server response.
problem types: Cross-site Scripting (XSS)
affected:
{
product: iobroker.web
vendor: n/a
versions:
status: affected, version: All versions prior to version 2.4.10
}