Jooby before 1.6.4 has XSS via the default error handler.
CVE Status: Modified
No CVSS data available
Exploit-db Github