An issue exists on Eaton 5P 850 devices. The Ubicacion SAI field allows XSS attacks by an administrator.
eaton 5p_850_firmware -