description: bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template
problem types: Cross-site Scripting (XSS) - Generic (CWE-79)
affected:
{
product: bracket-template node module
vendor: HackerOne
versions:
status: affected, version: Versions up to and including 1.1.5
}