ONOS versions 1.8.0, 1.9.0, and 1.10.0 are vulnerable to XSS.
https://gerrit.onosproject.org/#/c/14182/
https://gerrit.onosproject.org/#/c/14179/
https://gerrit.onosproject.org/#/c/14170/
https://gerrit.onosproject.org/#/c/14148/
https://gerrit.onosproject.org/#/c/14069/
https://gerrit.onosproject.org/#/c/14067/
https://gerrit.onosproject.org/#/c/14066/
https://gerrit.onosproject.org/#/c/14050/