PT-2019-12633

Name of the Vulnerable Software and Affected Versions Gridea version 0.8.0 Description The issue allows for arbitrary code execution through an XSS vulnerability. This can be achieved by calling the Nodejs module, as demonstrated by the use of child process.exec and the substring img src=...