CVE-2017-16880

The CVE-2017-16880 entry concerns the filp whoops PHP library. Affected component: the dump() function in Util/TemplateHelper.php. Root cause: the function allows Cross-site Scripting (XSS) in versions before 2.1.13. The impact is XSS via output of unsanitized data; no explicit exploitation detai...