Open
Description
Is possible to make XSS attack after add option "<script>alert('XSS')</script>" into select.
Option name should be escaped.
Metadata
Metadata
Assignees
Labels
No labels
{{ message }}
No one assigned
No labels
No projects
No milestone
None yet
No branches or pull requests