CVE-2018-16061

Mitsubishi Electric SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.