EPSS
Percentile
36.4%
The npm module forms is vulnerable to cross-site scripting (XSS) attacks. These attacks are possible because it does not escape text in tags.
github.com/caolan/forms/commit/bc01e534a0ff863dedb2026a50bd03153bbc6a5d
nodesecurity.io/advisories/158