Cross-site Scripting (XSS)

gentelella is vulnerable to Cross-Site Scripting XSS attacks. Remote attackers are able to inject arbitrary Javascript into a victim's browser via an unsanitized parameter from a vulnerable plugin...