Panda ActiveScan contains a flaw that allows for remote cross site scripting attacks. This flaw exists because the application does not validate the ’email’ variable upon submission to the ascan_6.asp script. Version 5.53.00 is affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/49233/pandaXSS.txt
Source: https://packetstormsecurity.com/files/49233/pandaXSS.txt.html