Cross-Site Scripting (XSS)

gogs.io/gogs is vulnerable to cross-site scripting. The vulnerability exists in list.tmpl because the DisplayName is not properly sanitized which allows an attacker to inject and execute arbitrary javascript...