Cross-site Scripting (XSS)

The npm module forms is vulnerable to cross-site scripting XSS attacks. These attacks are possible because it does not escape text in tags...