2022-06-22 11:30:16
Mend
PUBLISHED
In habitica versions v4.119.0 through v4.232.2 are vulnerable to DOM XSS via the login page.