Cross-site Scripting (XSS)

scrape-metadata is vulnerable to cross-site scripting XSS attacks. The library scrapes metadata without sanitization, allowing a malicious user to inject and execute arbitrary Javascript through tags on an attacker controller website...