Cross-site Scripting (XSS)

Overview wwbn/avideo is an Audio and Video Platform or simply "A Video Platform". Affected versions of this package are vulnerable to Cross-site Scripting XSS via the listVideos process, which fetches and stores the snippet.title field from the YouTube Data API without proper HTML encoding. An...