CVE-2022-1928

CVE-2022-1928 is a stored Cross-site Scripting (XSS) vulnerability affecting Gitea versions prior to 1.16.9. This medium-severity vulnerability, rated 5.4 CVSS, allows an authenticated attacker to inject malicious scripts that execute in a victim's browser, potentially leading to information disclosure or unauthorized actions. While the attack complexity is low, it requires user interaction and a successful attack could compromise confidentiality and integrity. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.