TI-2008-05976 CVE-2008-6283 · GHSA-qvj2-797v-6f4mCross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject…Priority LOW 23Cross-site scripting (XSS) vulnerability in Subtext 2.0 allows remote attackers to inject arbitrary web script or HTML via a comment, related to "the feature which converts URLs to anchor tags."CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01223 · Published 2009-02-25 · No fix listed CWE-79