• The src parameter for one script tag from this page is dirrectly controlled by user input. An attacker who can control the reference location to a JavaScript source file can load a script of their choice into an application.

• Your script should properly sanitize user input. Do not allow user-input to control script source location references.

• 

• CWE-79

• CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

• XSS

• Adobe Coldfusion 8 multiple linked XSS vulnerabilies
• WordPress Plugin Quotes Collection Cross-Site Scripting (2.0.5)
• WordPress Plugin WordPress-Amazon-Associate (WPAA) Multiple Cross-Site Scripting Vulnerabilities (1.7.3)
• WordPress Plugin E-Search Multiple Cross-Site Scripting Vulnerabilities (1.0)
• WordPress Plugin Custom Post Type UI Cross-Site Scripting (1.1.1)