Cross-Site Scripting (XSS)

layui is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters in checkboxs before it output to the front end, allowing an attacker to inject and execute malicious JavaScript in the victim's browser...