npm›oauth2orize-fprm›CVE-2018-116476.1 MEDIUMCross-site Scriptingindex.js in oauth2orize-fprm is vulnerable to XSS via a crafted URL.