ScratchTools Cross-Site Scripting Vulnerability

ScratchTools is a web extension to the STForScratch open source. Designed to make interaction with the Scratch programming language community (Scratching) easier, ScratchTools suffers from a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the client side.