CVE-2008-4481

CVE-2008-4481 describes a cross-site scripting (XSS) vulnerability in Redmine 0.7.2 and earlier. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, enabling an attacker to execute code in a user’s browser. Multiple connected sources (NVD, JVN/JVNDB, ...