Cachet cross-site scripting vulnerabilities

Cachet 2.4.1 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from the event creation form, which contains stored cross-site scripts. Authorized attackers can inject malicious HTML/JavaScript, which can be executed in the browser of users viewing the status...