Cross-site Scripting (XSS)

github.com/gogits/gogs is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the strings used in the viewcontent template, allowing a malicious user to inject and execute arbitrary code...