Cross-site Scripting (XSS)

ZITADEL is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper sanitization when rendering login UI templates. This vulnerability allows an attacker to inject HTML into the login page via crafted links...