Skip to content
OpenAdvisories
Medium · 6.1 CVE-2026-80180 EUVD-2026-70921GHSA-w8gw-2cgm-wv2h

Apache Allura: Stored XSS via markdown HTML processing

Published Sep 4, 2026 · Updated Sep 4, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Allura

Description

Stored XSS via markdown HTML processing in Apache Allura.

This issue affects Apache Allura: from through 1.20.0.

Users are recommended to upgrade to version 1.21.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Allura ≤ 1.20.0 —

References