Cross-site Scripting (XSS)

github.com/gotify/server is vulnerable to cross site scripting. The vulnerability exists in the UploadApplicationImage function in application.go because it allows authenticated users to upload html files where attacker could execute client side scripts...