Cross-site Scripting (XSS)

cnvs/easel is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary JavaScript because the library does not sanitize it's user input...