Cross-site Scripting (XSS)

teler.app is vulnerable to cross-site scripting. The vulnerability exists because the script.js does not properly escape the user input strings before being rendered on the dashboard, allowing an attacker to inject and execute malicious javascript through the /events endpoint.