CVE-2025-25189: ZOO-Project Reflected Cross-Site Scripting in publish.py

ZOO-Project ships a publish.py CGI script with its Web Processing Service server. The script writes the jobid request parameter straight into the HTML it returns.

An attacker sends a victim a link with script in the jobid value, and it runs in the victim's browser against the ZOO-Project origin. Commit 7a5ae1a fixes the issue.