Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via rendering page titles in frontend search results without proper output encoding. An attacker can execute arbitrary scripts in the context of the user's browser by injecting malicious HTML markup into page...