Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*" ] }