C-MOR Video Surveillance version 5.2401 suffers from a reflective cross site scripting vulnerability.