7.0.1.1013

DATE	CVE	VULNERABILITY TITLE	RISK
2023-02-03	CVE-2021-36538	Cross-site Scripting vulnerability in Gurock Testrail Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the reference field in milestones or description fields in reports. network low complexity gurock CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.