The /log type parameter on Web Port 1.19.1 is vulnarable to XSS.
Update WebPort 1.19.1 to the latest version