Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.
{ "cwe_ids": [ "CWE-79" ] }