Cross-site Scripting (XSS)

Overview spin.js is an A spinning activity indicator Affected versions of this package are vulnerable to Cross-site Scripting XSS via the spin function that allows a creation of more than 1 alert for each 'target' element. An attacker would need to set an arbitrary key-value pair on...