Cross-Site Scripting (XSS)

enhavo/enhavo-app is vulnerable to Cross Site Scripting XSS. The vulnerability is due to insufficient input validation in the Undertitle text field, enabling attackers to insert malicious code that is then executed within the context of the website...