Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the API key name during its generation. An attacker can execute arbitrary scripts in the context of an admin's session by embedding malicious content into the API key name field. This is only exploitable if...