Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the time parameter in the archived-revision workflow. An attacker can execute arbitrary JavaScript in the victim's browser, steal browser-accessible sensitive data, or perform actions as the victim by tricki...