Progress Ipswitch MoveIT 1.1.11 exists to contain a cross-site scripting (XSS) vulenrability via the API authentication function.
moveit moveit 1.1.11