WS-2020-0413

In Jarboe package for Laravel Web Framework, versions 1.0.0 through 1.6.0 are vulnerable to Cross-Site Scripting XSS, due to use of unescaped Blade template engine statements, instead of regular escaped ones. An attacker could inject arbitrary javascript code through Markdown or WYSIWYG input...