Self XSS on Not Found Message

[infosec-au]

A DOM based XSS exists on the Not Found Message as seen in the demo, when a user self inputs a vector such as ">.

Whilst the risk is low, it is recommended that all user input is escaped and treated with in a more secure manner.

As this is a JQuery plugin and may be implemented in web applications, developers which may use this plugin as it is, may introduce vulnerabilities in their applications.