Failing to properly encode user input, several backend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript.
{
"severity": "MODERATE",
"cwe_ids": [],
"nvd_published_at": null,
"github_reviewed": true,
"github_reviewed_at": "2024-06-03T14:29:56Z"
}