Cross-site Scripting (XSS)

sexstatic is vulnerable to cross-site scripting XSS attacks. The vulnerability exists due to the lack of sanitization in user input of pathname in showdir.js, allowing arbitrary javascript code to be executed when rendered...