5 matches found
Exploit for Cross-site Scripting in Gitea
CVE-2021-28378 Details about this CVE herehttps://www.cved...
5.4CVSS7AI score0.08762EPSS
SaveExploits2
CVE-2021-28378
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations...
5.4CVSS6.1AI score0.08762EPSS
SaveExploits2References4
CVE-2021-28378
Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations...
3.7CVSS5.6AI score0.08762EPSS
SaveExploits2References3
CVE-2021-28378
CVE-2021-28378 affects Gitea 1.12.x and 1.13.x up to (but not including) 1.13.4. The issue is a client-side XSS vulnerability triggered when rendering issue/PR references that are injected in popup UI via the inline ref-issue links; insufficient escaping of fields like label.name, issue.title, an...
5.4CVSS5.2AI score0.08762EPSS
SaveExploits2References3Affected Software1
20