CVE-2019-13122

Summary: CVE-2019-13122 is a Patchwork XSS in the template tag that renders message IDs (templatetags/patch.py) across Patchwork v1.1–v2.1.x. An attacker can inject JavaScript/HTML into the patch detail page via an email to a mailing list consumed by Patchwork. Affected versions include v2.1.x an...