Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations.Referenceshttps://github.com/go-gitea/gitea/pull/14898https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/https://github.com/PandatiX/CVE-2021-28378