Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
Thunderdome is an open source agile planning poker tool in the theme of Battling for points. The provided username is not properly escaped. This issue has been patched If users are unable to update they should disable the LDAP feature if in use.