Cross-Site Scripting (XSS)

drupal/core is vulnerable to cross-site scripting XSS attacks. Malicious users can inject arbitrary web script through the templatestring parameter in TwigEnvironment.php due to incorrect filtering of the parameter...