Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS due to the improper neutralization of HTML tags in users' first names. An attacker can create and send phishing emails from the affected instance's email address by injecting malicious HTML content. Details...