Description Bose SoundTouch devices allow XSS via a crafted public playlist from Spotify. References http://aryanitin.com/2017-12-20-CVE-2017-17750/