An XSS issue was discovered in Steve Pallen Xain before 0.6.2 via the order parameter.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20302.json"