CVE-2021-31330

CVE-2021-31330 affects Review Board: XSS vulnerability exists in versions 3.0.20 and earlier and 4.0 RC1 and earlier, triggered by using Markdown editing. An authenticated attacker can inject malicious JavaScript code, with persistence after injection. Root cause: improper sanitization/execution ...