CVE-2016-1000227

Name of the Vulnerable Software and Affected Versions: bootstrap-tagsinput versions (all)

Description: The issue arises from the failure to properly sanitize or encode user input for the itemTitle parameter, leading to cross-site scripting when user input is passed into this parameter unmodified.

Recommendations: For all versions, consider avoiding the use of the itemTitle parameter as a mitigation measure, or use a fork of the module that is actively maintained and provides similar functionality.