Cross-site Scripting (XSS)

latte/latte is vulnerable to cross-site scripting. The vulnerability exists because the library allows to escape the template sandbox through the 'validateTokens' function in 'PhpWriter.php', allowing an attacker to inject script into web pages and its leads to XSS attack...