Cross-site Scripting (XSS)

React.Core is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the insecure configuration where HTML found in JSON are not escaped by default, causing potential XSS attacks...