description: Bodhi 2.9.0 and lower is vulnerable to cross-site scripting resulting in code injection caused by incorrect validation of bug titles.
problem types: CWE-94
affected:
{
product: Bodhi
vendor: Fedora Project Infrastructure
versions:
lessThanOrEqual: 2.9.0, status: affected, version: unspecified, versionType: custom
}