CVE-2021-31330

Published: 2022-05-11T18:15Z

Last Modified: 2024-11-21T06:05Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt