Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS in the JobCodeController.save process when user-supplied input in the glueSource parameter is stored without output encoding, and subsequently rendered unescaped by the FreeMarker template job.code.ftl. An...