CVE-2015-1866

CVE-2015-1866 is an XSS vulnerability in Ember.js affecting the 1.10.x line before 1.10.1 and the 1.11.x line before 1.11.2. The issue arises from how the select view or related binding handles user-supplied content for option labels, allowing injected scripts when data is not properly escaped. A...