Launchpad.net

CVE 2013-1760

The Bug Genie before 3.2.6 has Multiple XSS and HTML Injection Vulnerabilities

See the CVE page on Mitre.org for more details.