Cross-Site Scripting (XSS)

bodhi-server is vulnerable to cross-site scripting XSS. A remote attacker with create/edit updates privileges is able to inject arbitrary Javascript into a victim's browser via multiple parameters in the templates such as the beautifytitle, displayname and requirements...