Cross-site Scripting (XSS)

ssddanbrown/bookstack, is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization of the iframe tags on the CspService.php file allows an attacker to inject javascript through it...