Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the htmlcontent process. An attacker can execute arbitrary scripts in the browsers of visitors by injecting malicious HTML or JavaScript into an HTML block that is rendered without proper sanitization. This ...