3 matches found
Cross-Site Scripting (XSS)
github.com/woodpecker-ci/woodpecker is vulnerable to cross-site scripting. The vulnerability exists in BuildLog.vue due to lack of escaping in build logs which allows an attacker to inject and execute arbitrary javascript...