CVE-2026-120729 | Gitea up to 28.3.x Popup cross site scripting

November 15, 2026 Yanac

A vulnerability labeled as problematic has been found in Gitea up to 28.3.x. Impacted is an unknown function of the component Popup. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-120729. The attack can be launched remotely. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More