Launchpad.net

CVE 2021-4108

snipe-it is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

See the CVE page on Mitre.org for more details.