> ## Documentation Index
> Fetch the complete documentation index at: https://docs.codeant.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Unescaped tag

<AccordionGroup>
  <Accordion title="unescaped-tag">
    Detected a Thymeleaf tag that does not escape output. This is dangerous because if any data in this expression can be controlled externally, it is a cross-site scripting vulnerability. Instead, use the 'th:text' or '\[\[...]]' to escape this expression.<br />**Likelihood**: MEDIUM<br />**Confidence**: LOW<br />**CWE**: <br />- CWE-116: Improper Encoding or Escaping of Output
    <br />**OWASP**: <br />- A03:2021 - Injection
  </Accordion>
</AccordionGroup>