1 matches found
Cross-site Scripting (XSS)
github.com/microcosm-cc/bluemonday is vulnerable to Cross-Site Scripting XSS attacks. The vulnerability exists due to the use of strings.toLower which converts the symbol \u0130 İ to i...