STVS ProVision version 5.9.10 suffers from an authenticated reflective cross site scripting vulnerability.