Cross-site Scripting (XSS)

scancodeio is vulnerable to Cross-site Scripting XSS. The vulnerability exists due to the lack of sanitization in the key parameter of licenses.py, which allows an attacker to inject and execute malicious JavaScript through the /license/ endpoint...