PT-2021-11557

Name of the Vulnerable Software and Affected Versions: xmlhttprequest versions prior to 1.7.0 xmlhttprequest-ssl all versions Description: The issue arises when requests are sent synchronously, with async=False on xhr.open. If malicious user input flows into xhr.send, it could result in arbitrary...