Cross-Site Scripting (XSS)

Lavalite/framework is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary JavaScript into a victim's browser through multiple entries in the edit page...