Cross-site Scripting (XSS)

github.com/gogs/gogs is vulnerable to cross-site scriptingXSS attacks. An attacker is able to inject and execute malicious javascript through Contexter function via a manipulated CSRF cookie...