Vulnerability record: CVE-2022-24891 in ESAPI/esapi-java-legacy (version 2.2.3.1)
Weakness: CWE-079 \u2014 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
GitHub Security Advisory: GHSA-q77q-vx4q-xx6q
Repository: https://github.com/ESAPI/esapi-java-legacy
Buggy commit: 2e8694c6beb3bdbb2645b882eba72ce41bc63242
Fix commit(s): 096aa60d6441fce4c632b36b36fdf5f53799c29a