An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges the attacker could perform stored XSS attacks by inserting JavaScript and HTML code in user creation functionality.