CVE-2016-3942

CVE-2016-3942 details in connected docs pertain to a remote code execution in the JavaScript template engine jsrender . Affected versions are vulnerable when server-delivered client-side templates dynamically embed user input, enabling an attacker to execute arbitrary code through crafted templat...