Cross-Site Scripting

github.com/apache/incubator-answer is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to inadequate sanitization of user input in the summary field, which allows a logged-in attacker to inject malicious code when modifying their own submitted question.