Cross-site Scripting (XSS)

Overview keynote is a package that provides a consistent interface for defining and instantiating presenters. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the attrstos function in lib/keynote/rumble.rb, which does not escape quote marks in attribute strings...