Cross Site Scripting

sidekiq-unique-jobs is vulnerable to Cross Site Scripting (XSS). The vulnerability is due to a missing input validation and output sanitization for the GET request parameters handled by the endpoints - /changelogs, /locks and /expiring_locks of the “admin” web UI. This can allow an attacker to successfully execute malicious code, possibly stealing cookies, session data, or local storage data from the app the sidekiq-unique-jobs web UI is mounted in.