Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the CIP encoder process. An attacker can inject arbitrary markup into generated XML output by supplying a specially crafted file that, when converted to CIP format, results in unescaped input-derived data...