-
Notifications
You must be signed in to change notification settings - Fork 4
Open
Description
The user input is not sanitized, which leads to a code injection vulnerability.
How to recreate
Input this into the input box:
</b> <a href="#" onclick="alert('Hello, World!'); return false;">Click me</a>Then, you will see the hyperlink appears:
You can then click the hyperlink, which will run the code:
Metadata
Metadata
Assignees
Labels
No labels

