CVE-2021-32860

iziModal is a modal plugin with jQuery. Versions prior to 1.6.1 are vulnerable to cross-site scripting XSS when handling untrusted modal titles. An attacker who is able to influence the field "title" when creating a "iziModal" instance is able to supply arbitrary "html" or "javascript" code that...