WS-2013-0015

Affected versions of the gon package before 4.1.1 are vulnerable to Cross-site Scripting XSS...