Cross-site Scripting (XSS)

primefaces is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of the item, and inputTextarea.getCounterTemplate attributes in the InputTextareaRenderer class...