Cross Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scriptingXSS attacks. The library does not properly escape user inputs through title parameter in addressCardHtml function, which allows an attacker to inject and execute malicious javascript on victim's browser...