CVE-2023-33961

Name of the Vulnerable Software and Affected Versions Leantime versions 2.3.21 and later

Description The issue allows an authenticated user with commenting privileges to inject malicious Javascript into a comment. When the malicious comment is loaded in the browser by a user, the malicious Javascript code executes.

Recommendations For Leantime versions 2.3.21 and later, at the moment, there is no information about a newer version that contains a fix for this vulnerability.