[metro4] Cross site scripting in Metro UI

Metro UI v4.4.0 to v4.5.1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the Javascript function. User input is not properly sanitized before rendering in the textarea component.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-41376
• https://alicangonullu.org/konu/138
• https://youtu.be/_wzGVpX54Rc
• https://github.com/advisories/GHSA-633r-r4p8-pw3w