CVE-2021-31330: Reviewboard Review Board

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

A Cross-Site Scripting (XSS) vulnerability exists within Review Board versions 3.0.20 and 4.0 RC1 and earlier. An authenticated attacker may inject malicious Javascript code when using Markdown editing within the application which remains persistent.

Affected products

• Reviewboard Review Board: version 3.0.20 only; version 4.0 only

Published 2022-05-11. Last modified 2026-06-17.