A flaw was found in serialize-javascript. This vulnerability allows an attacker to conduct Cross-Site Scripting (XSS) by supplying crafted function source text that bypasses escaping logic. When the resulting serialized data is rendered inside an HTML script block on a web page, the unneutralized closing script delimiter prematurely terminates the block and allows injected markup to execute arbitrary scripts in the user's browser.