Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
{ "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*" ], "severity": "Low" }