The vulnerability is a persistent XSS flaw in the syslog viewing function of the ALGO 8180 IP Audio Alerter web interface. It stems from missing validation of user‑supplied data and allows an attacker to inject arbitrary scripts, which the browser will execute in the context of the target user’s session. This can lead to theft of session cookies, unauthorized requests, or other actions performed with the target user’s privileges.

Devices running ALGO Solutions 8180 IP Audio Alerter, particularly firmware versions around 5.5. The affected hardware includes the 8180 model with firmware 5.5, as identified in the product’s CPE listings. Newer firmware releases may contain the fix, but legacy devices remain vulnerable.

The CVSS score of 6.1 indicates moderate severity, and the EPSS score of less than 1% reflects a low likelihood of exploitation as of the last assessment. The flaw does not require authentication; it can be triggered by any remote user through the web UI. While the attack requires only a web request, the potential for persistent script execution grants attackers an opportunity to compromise the session of any logged‑in user, potentially affecting confidentiality, integrity, and availability of the system. The vulnerability is not yet listed in the CISA KEV catalog, suggesting no widely known exploitation at this time.