2025-12-26 04:14:03
mitre
PUBLISHED
In Gitea before 1.20.1, a forbidden URL scheme such as javascript: can be used for a link, aka XSS.