Cross-Site Scripting (XSS)

syncope-client-enduser is vulnerable to cross-site scripting XSS. Lack of sanitization in enduser notifications allow a remote attacker to inject and execute abitrary Javascript in a user's browser via the successMessage...