WS-2019-0221

eco all versions are vulnerable to XSS by the escape implementation that to do not escape single quotes...

PT-2020-21476

Name of the Vulnerable Software and Affected Versions eco versions all Description The issue concerns Cross-Site Scripting XSS due to the package's default escape implementation failing to properly escape single quotes. This failure may allow attackers to execute arbitrary JavaScript on the...