Is possible to make XSS attack after add option "<script>alert('XSS')</script>" into select. Option name should be escaped.
Is possible to make XSS attack after add option "<script>alert('XSS')</script>" into select.
Option name should be escaped.