BigFix Web Reports authorized users may perform HTML injection for the email administrative configuration page.
CWE-79, CWE-79