A vulnerability classified as problematic was found in Wowza Streaming Engine 4.5.0. Affected by this issue is some unknown functionality. Such manipulation of the argument appName/vhost/uiAppType/wowzaCloudDestinationType leads to cross site scripting.
This vulnerability is documented as CVE-2016-20036. The attack can be executed remotely. Additionally, an exploit exists.