Trane Building Automation Controllers Cross-site Scripting
The affected product’s web application does not properly neutralize the input during webpage generation, which could allow an attacker to inject code in the input forms.