Cross-site Scripting (XSS)

Overview devbridge-autocomplete is an Autocomplete provides suggestions while you type into the text field. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the formatGroup and formatResult functions. An attacker can inject and execute arbitrary HTML or JavaScript...