Launchpad.net

CVE 2022-2589

Cross-site Scripting (XSS) - Reflected in GitHub repository beancount/fava prior to 1.22.3.

See the CVE page on Mitre.org for more details.