XSS (cross site scripting) vulnerability?

[ncote]

Is this vulnerability legitimate? If so, is there a roadmap for the next update? Thank you

Summary: <= 1.16.0 is vulnerable to Cross Site Scripting (XSS)

https://vdp.patchstack.com/database/wordpress/plugin/h5p/vulnerability/wordpress-interactive-content-h5p-plugin-1-16-0-cross-site-scripting-xss-vulnerability

[otacke]

https://h5p.org/node/1546697

[icc]

Yes, we're working on a fix that will be released as soon as possible.