CVE-2018-11647

The CVE pertains to oauth2orize-fprm, a Post Response mode component for OAuth2orize. A cross-site scripting (XSS) flaw exists in index.js before version 0.2.1, caused by insufficient encoding of input values, enabling XSS via a crafted URL. No explicit exploitation details are provided in the su...