CVE-2021-28378: Gitea

Medium severity, CVSS 5.4. EPSS: 8.8% chance of exploitation in the next 30 days.

Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.

Affected products

• Gitea Gitea: from 1.12.0, up to and including 1.12.6; from 1.13.0, before 1.13.4 (fixed in 1.13.4)

Published 2021-03-15. Last modified 2026-06-17.