Cross-site scripting (XSS) vulnerability in the \advanced settings - time server\ module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the \server name\ field in actions/ChangeConfiguration.html.