Known vulnerabilities in the allows an authenticated attacker to inject arbitrary HTML via the sign parameter theme
1 security advisory has been published for the allows an authenticated attacker to inject arbitrary HTML via the sign parameter theme. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.