Cross-Site Scripting (XSS)

craftcms/cms is vulnerable to cross-site scripting XSS attacks. The attacks exist because exception messages are not encoded to prevent from XSS attacks...