Reflect XSS issue in Lock.js

[lihua.zhang]

Problem Statement

We use lock 11.27.2. The input fields in lock.js are vulnerable to reflect XSS injection.

Solution

Please update Lock.js to latest version.

Reference

CVE-2021-32641: Security Update for Auth0 Lock Library