Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting. The vulnerability exists in FeedWidget.js because it doesn't filter out the valid input links which allows an attacker to inject and execute arbitrary javascript...