Improper Neutralization of Input During Web Page Generation

The SEL RTAC web interface doesn't properly filter user input, allowing an authenticated attacker to inject malicious scripts that run in other users' browsers. This can be used to steal sensitive information or perform unauthorized actions on behalf of victims.

Cross-site Scripting (XSS) vulnerability in SEL RTAC Web Interface resulting from improper input sanitization during HTML generation. Attack requires prior authentication and allows injection of arbitrary JavaScript code that executes in victim browsers, potentially enabling session hijacking or credential theft.