StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')