Name of the Vulnerable Software and Affected Versions bpmn-js-properties-panel versions prior to 0.31.0

Description The issue is related to Cross-Site Scripting (XSS) due to the failure to sanitize input in specially configured diagrams. This may allow attackers to inject arbitrary JavaScript in the embedding website.

Recommendations Upgrade to version 0.31.0 or later.