Cross-site Scripting (XSS)

grumpydictator/firefly-iii is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of link.destination.description and link.source.description in delete.twig...