LabKey Server Community Edition <18.3.0 - Cross-Site Scripting Detection

LabKey Server Community Edition before 18.3.0-61806.763 contains a reflected cross-site scripting vulnerability via the onerror parameter in the /r2/query endpoints, which allows an unauthenticated remote attacker to inject arbitrary JavaScript. !/usr/bin/env python3 -- coding: utf-8 -- """LabKey...