Description
Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page.
Remediation
References
Related Vulnerabilities
WordPress Plugin You Shang Cross-Site Scripting (1.0.1)
Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2018-16476)
WordPress Plugin Email Users Cross-Site Scripting (4.7.5)
WordPress Plugin GB Gallery Slideshow SQL Injection (1.2)
WordPress Plugin WooCommerce Help Scout Arbitrary File Upload (2.9)