Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
The jquery.json-viewer library through 1.4.0 for Node.js does not properly escape characters such as < in a JSON object, as demonstrated by a SCRIPT element.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in jquery.json-viewer.