CVE-2016-10537

The CVE-2016-10537 entry concerns the Backbone.js backbone module (v0.3.3 and earlier) vulnerable to cross-site scripting via the Model#Escape function. The root cause is a regex that fails to encode HTML metacharacters (e.g.,