Mathjax: Latex For Drupal
Improper neutralization of input during web page generation allows Cross-Site Scripting (XSS). The module integrates the MathJax library, a JavaScript-based LaTeX rendering solution, but includes library configurations that fail to escape JavaScript within the TeX it formats.