Armorlogic Profense Web Application Firewall before 2.2.22 and 2.4.x before 2.4.4 does not properly implement the \negative model \ which allows remote attackers to conduct cross-site scripting (XSS) attacks via a modified end tag of a SCRIPT element.