CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Upgrade to the latest version