Description
XSS in sexstatic <=0.6.2 causes HTML injection in directory name(s) leads to Stored XSS when malicious file is embed with
Remediation
References
https://hackerone.com/reports/328210
Related Vulnerabilities
CVE-2021-21624 Vulnerability in maven package org.jenkins-ci.plugins:role-strategy
CVE-2022-26049 Vulnerability in maven package com.diffplug.gradle:goomph
CVE-2022-31129 Vulnerability in maven package org.webjars.npm:moment
CVE-2016-10538 Vulnerability in maven package org.webjars.npm:cli
CVE-2021-39149 Vulnerability in maven package com.thoughtworks.xstream:xstream