Technicolor versions TC7300.B0 through STFA.51.20 suffer from a persistent cross site scripting vulnerability.