CVE-2024-23341

Name of the Vulnerable Software and Affected Versions TuiTse-TsuSin versions prior to 1.3.2

Description The issue is related to a html injection vulnerability when using tuitse html without quoting the input. This vulnerability can be exploited when the tuitse html function is used without proper input sanitization. As a workaround, sanitizing Taigi input with HTML quotation can help mitigate the issue.

Recommendations For versions prior to 1.3.2, upgrade to version 1.3.2 to resolve the issue. As a temporary workaround, consider sanitizing Taigi input with HTML quotation to minimize the risk of exploitation.