JetBrains Upsource before 2019.1.1412 was not properly escaping HTML tags in a code block comments, leading to XSS.

Published Oct 1, 2019 · Updated Aug 5, 2024 · Assigned by mitre