Dradis before 4.8.0 allows persistent XSS by authenticated author users, related to avatars.

Published Apr 25, 2023 · Updated May 30, 2025 · Assigned by mitre