CVE-2013-4519: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the 1 Branch field or 2 caption of an uploaded file...