Launchpad.net

CVE 2023-23949

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.

See the CVE page on Mitre.org for more details.

References