Description
bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template
Remediation
References
https://hackerone.com/reports/317125
Related Vulnerabilities
CVE-2023-36472 Vulnerability in npm package @strapi/admin
CVE-2021-20087 Vulnerability in npm package jquery-deparam
CVE-2021-21317 Vulnerability in npm package uap-core
CVE-2021-22060 Vulnerability in maven package org.springframework:spring-core
CVE-2023-46502 Vulnerability in maven package org.opencrx:opencrx-core