Cross-site Scripting (XSS)

mayan-edms is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization of node.label in the jstreedata function of mayan/apps/cabinets/widgets.py, causing XSS attacks...