Cross-site Scripting (XSS)

zaproxy is vulnerable to cross-site scripting XSS attacks. The vulnerability exists as zaproxy does not properly sanitize the Alert IconUrl, allowing arbitrary HTML code to be injected...