A Cross-Site Scripting (XSS) vulnerability exists in the ORing IAP-420 web interface due to missing input validation. This affects version 2.01e and earlier. The vulnerability allows an attacker to inject malicious scripts that may impact confidentiality and integrity but does not affect availability.