CVE-2019-13488

CVE-2019-13488 affects Trape up to 2019-05-08, with an XSS in static/js/trape.js. The vulnerability allows remote injection of script/HTML via the country, query, or refer parameters to the /register URI because the jQuery prepend() method is used without proper sanitization. Affected component/f...