CVE-2016-1000239: XSS in URL Query String Parameter

Severity: Critical

CVSS Score: 10

In versions 2.1.0-M1 and 2.1.0-M2, swagger-ui has a cross site scripting (XSS) vulnerability in the `url` query string parameter.