cross-posted from: lemmy.zip/post/54305624
Open source React executes malicious code with malformed HTML—no authentication needed.
Maximum-severity vulnerability threatens 6% of all websites
Submitted 1 day ago by floofloof@lemmy.ca to cybersecurity@infosec.pub