CVE-2017-12971 (apache2triad)

Cross-site scripting (XSS) vulnerability in Apache2Triad 1.5.4 allows remote attackers to inject arbitrary web script or HTML via the account parameter to phpsftpd/users.php.

Source: CVE-2017-12971 (apache2triad)