npm/npm-124
XSS in itemTitle parameter
Bootstrap Tags Input is a jQuery plugin providing a Twitter Bootstrap user interface for managing tags.
Version 0.8.0 contains a cross site scripting vulnerability (XSS) via the `itemTitle` parameter. By supplying a malicious value for this parameter, it is possible to execute arbitrary code.
This vulnerability is being disclosed before a public patched release is available because of an existing Github issue which is already public.