Description Swagger-UI before 2.2.1 has XSS via the Default field in the Definitions section. Remediation References CVE-2016-5682 Related Vulnerabilities WordPress Plugin WordPress Facebook SQL Injection (1.0.13) WordPress Plugin Caldera Forms-More Than Contact Forms Multiple Cross-Site Scripting Vulnerabilities (1.5.9.1) WordPress Plugin Newsletter Subscription Form Possible Remote Code Execution (1.1.2) WordPress Plugin Bold Page Builder Security Bypass (2.3.1) WordPress Plugin Comment Highlighter SQL Injection (0.13) Severity Medium Classification CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2016-5682