description: Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
problem types: Cross-site scripting (XSS)
affected:
{
vendor: unclebob
product: FitNesse
versions:
version: releases prior to 20220319, status: affected
}