Launchpad.net

CVE 2021-28378

Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

See the CVE page on Mitre.org for more details.