CVE-2020-28847: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment...