Cross-site Scripting (XSS)

uasoft-indonesia/badaso and badaso/core are vulnerable to Cross-site Scripting XSS. The vulnerability exists due to a lack of sanitization in the value and text parameters in BadasoSelect.vue and BadasoSelectMultiple.vue, which allows an attacker to inject and execute malicious JavaScript...