A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older which allows the injection of unauthenticated specially-crafted web requests without proper sanitization.