Ubiquiti Networks · Unifi · CVE-2013-3572
**Name of the Vulnerable Software and Affected Versions**
Ubiquiti Networks UniFi versions 2.3.5 and earlier
**Description**
A cross-site scripting (XSS) issue exists in the administer interface of the UniFi Controller, allowing remote attackers to inject arbitrary web script or HTML via a crafted client hostname. This enables attackers to potentially execute malicious scripts on the client-side.
**Recommendations**
For versions 2.3.5 and earlier, update to a version later than 2.3.5 to resolve the issue.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.