WS-2013-0245

In Minetest, versions 0.4.5 through 0.4.7 are vulnerable to Stored Cross-Site Scripting XSS in the server list, as the input passed to clienttop is not escaping HTML entities...