Cross-site scripting (XSS) vulnerability in the MicroServer Web Server for Xerox WorkCentre Pro Color 2128 2636 and 3545 version 0.001.04.044 through 0.001.04.504 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.