← Database

CVE-2021-36538

MEDIUM CVSS: 5.4 Published: 2023-02-03 Modified: 2026-06-17

Description

Cross Site Scripting (XSS) vulnerability in Gurock TestRail before 7.1.2 allows remote authenticated attackers to run arbitrary code via the reference field in milestones or description fields in reports.

Affected Platforms

Gurock Testrail

Weakness Type

CWE-79, CWE-79

References