**Reflected_XSS_All_Clients** issue exists @ **webgoat-lessons/webwolf-introduction/src/main/java/org/owasp/webgoat/plugin/MailAssignment.java** in branch **master** Severity: High CWE:79 [Vulnerability details and guidance](https://cwe.mitre.org/data/definitions/79.html) [Internal Guidance](https://custodela.atlassian.net/wiki/spaces/AS/pages/79462432/Remediation+Guidance) Lines: [32](https://github.com/Custodela/WebGoat//blob/master/webgoat-lessons/webwolf-introduction/src/main/java/org/owasp/webgoat/plugin/MailAssignment.java#L32) [51](https://github.com/Custodela/WebGoat//blob/master/webgoat-lessons/webwolf-introduction/src/main/java/org/owasp/webgoat/plugin/MailAssignment.java#L51) --- [Code (Line #32):](https://github.com/Custodela/WebGoat//blob/master/webgoat-lessons/webwolf-introduction/src/main/java/org/owasp/webgoat/plugin/MailAssignment.java#L32) ``` public AttackResult sendEmail(@RequestParam String email) { ``` --- [Code (Line #51):](https://github.com/Custodela/WebGoat//blob/master/webgoat-lessons/webwolf-introduction/src/main/java/org/owasp/webgoat/plugin/MailAssignment.java#L51) ``` public AttackResult completed(@RequestParam String uniqueCode) { ``` ---