HTML Report data is not HTML encoded #54
Description
XSS Vulnerability evidence is ironically injected into the HTML report. See example excerpt below:
<tr>
<td width="20%">
<p class="lead font-italic" style="font-size: 1.1em;"> Evidence</p>
</td>
<td width="80%">
<p class="lead"></blockquote><script>alert(1);</script><blockquote></p>
</td>
</tr>