Launchpad.net

CVE 2021-20848

Cross-site scripting vulnerability in rwtxt versions prior to v1.8.6 allows a remote attacker to inject an arbitrary script via unspecified vectors.

See the CVE page on Mitre.org for more details.