HomeAutomation version 3.3.2 suffers from persistent and reflective cross site scripting vulnerabilities.