It happens that developers conclude that React will unquestionably protect their code from all kinds of possible security problems. That’s not always right. As with all things in life, it’s not impossible to mess them up. React.js vulnerabilities can occur when you think that you are using the protective mechanisms of this library. It’s important to remember what React can and can’t handle for you.
infographic by: www.tatvasoft.com