Security disclosure
Stored XSS through WebSocket treatment writes in Nightscout (cgm-remote-monitor) version ≤ 15.0.7
Authenticated Nightscout users with treatment-write access could store unsanitised HTML through WebSocket writes, resulting in stored cross-site scripting when another user viewed the affected treatment.