Launchpad.net

CVE 2023-5544

Wiki comments required additional sanitizing and access restrictions to prevent a stored XSS risk and potential IDOR risk.

See the CVE page on Mitre.org for more details.