CVE-2018-1000998

FreeBSD CVSweb 2.x is affected by an XSS vulnerability on all pages; the issue can be triggered when victims load a specially crafted URL. The vulnerability is limited in impact and CVSweb is anonymous/read-only, but could affect other sites on the same domain. The problem appears to have been fi...