Failing to properly encode user input, several backend components are susceptible to Cross-Site Scripting, allowing authenticated editors to inject arbitrary HTML or JavaScript.
{ "github_reviewed": true, "severity": "MODERATE", "nvd_published_at": null, "github_reviewed_at": "2024-06-03T14:29:56Z", "cwe_ids": [] }