Apache Flex asdoc versions prior to 4.14.1 suffer from a cross site scripting vulnerability.