A XSS vulnerability was found in module public <0.1.4 that allows malicious Javascript code to run in the browser, due to the absence of sanitization of the file/folder names before rendering.
CVSS 3.0MEDIUM 6.1·Network·No auth·User interaction·EPSS 0.00769·Published 2019-02-01·Fixed in 0.1.4CWE-79