CVE-2019-8939: Improper Neutralization of Input During Web Page Generation

data/interfaces/default/history.html in Tautulli 2.1.26 has XSS via a crafted Plex username that is mishandled when constructing the History page...