EPSS
Percentile
22.7%
invenio-communities is vulnerable to cross-site scripting (XSS). The vulnerability exists through the lack of sanitization of community.description in about.html.
community.description
about.html
github.com/inveniosoftware/invenio-communities/commit/505da72c5acd7dfbd4148f884c73c9c3372b76f4