Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the /server/theme endpoint. Scripts can be run by sending a POST request with a Content-Type value beginning with "image/". Details Cross-site scripting or XSS is a code vulnerability that occurs when an...