Name of the Vulnerable Software and Affected Versions react versions prior to 0.14.0

Description The issue arises from the createElement function's failure to properly validate its input object, allowing attackers to execute arbitrary JavaScript in a victim's browser, thus facilitating Cross-Site Scripting (XSS) attacks.

Recommendations Upgrade to version 0.14.0 or later.