Cross-site Scripting (XSS)

nexus-core is vulnerable to cross-site scripting XSS. The vulnerability exists as the engineForLanguage method did not validate the language, failing to properly restrict the language to Groovy by default...