← All credits

Thanks saleemrashid for reporting this vulnerability through our HackerOne bug bounty program

1 vulnerability record and advisories credit this contributor.

CVE-2021-39887
A stored Cross-Site Scripting vulnerability in the GitLab Flavored Markdown in GitLab CE/EE version 8.4 and above allowed an attacker to execute arbitrary JavaScript code on the victim's behalf.