Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the clean function. An attacker can execute arbitrary JavaScript code in the context of the user's browser by submitting crafted HTML containing a formaction attribute with a dangerous URI scheme such as...