Cross-site Scripting (XSS)

ejs is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the opts parameter in the cpOptsInData function, allowing a malicious user to pass files that can get executed when rendered...