Aaron Queenan

Array arguments aren't escaped

2

If you pass in an array argument, the elements of the array are joined, but the result isn't escaped, so there is an opportunity for script injection.