Cross-site Scripting (XSS)

primefaces is vulnerable to cross-site scripting XSS attacks. The library does not properly escape the headerText and footerText variables in the UIColumn, allowing a malicious user to inject and execute arbitrary Javascript...