ClusterLabs pcs before version 0.9.157 is vulnerable to a cross-site scripting vulnerability due to improper validation of Node name field when creating new cluster or adding existing cluster.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-2661.json"