Arbitrary Code Injection

Overview underscore is a JavaScript's functional programming helper library. Affected versions of this package are vulnerable to Arbitrary Code Injection via the template function, particularly when the variable option is taken from .templateSettings as it is not sanitized. PoC const =...