AIKIDO-2024-10379

TL;DR

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Autocomplete function located in the assets/js/autocomplete.js file. Manipulating the item argument in this function can lead to the execution of malicious scripts, enabling an attacker to inject arbitrary JavaScript into the page. This vulnerability can compromise the security of the application by allowing an attacker to execute malicious code in the context of a user's session.