CVE-2019-15602: Improper Neutralization of Input During Web Page Generation

The fileview package v0.1.6 has inadequate output encoding and escaping, which leads to a stored Cross-Site Scripting XSS vulnerability in files it serves...