J2 Innovations FIN Stack Cross-Site Scripting Vulnerability

J2 Innovations FIN Stack is a framework for OEM development. A cross-site scripting vulnerability exists in the authentication webform in J2 Innovations FIN Stack version 4.0. A remote attacker can exploit this vulnerability by sending a query string to /auth/ariosa/login to inject arbitrary web...