Cross-site Scripting (XSS)

Zfc-User is vulnerable to cross-site scripting XSS attacks. The library does not sanitize input strings in the user/login.phtml files, allowing a malicious user to inject and execute arbitrary script...