Cross-site Scripting (XSS)

Chargify2 is vulnerable to cross-site scripting XSS. It does not sanitize the API response from Chargify2, allowing XSS attacks...