Cross-site Scripting (XSS)

mircroweber is vulnerable to cross-site scripting XSS attacks. The library does not escape parameters passed to the application through the return URL, allowing a malicious user to inject and execute arbitrary web script...