Huawei ISM Professional suffers from a cross site scripting vulnerability.