Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
WebTorrent allows XSS in the HTTP server via a title or file name.
Advisories for Npm/Webtorrent package
2019
WebTorrent allows XSS in the HTTP server via a title or file name.