Debian Security Advisory 1094-1: Joxean Koret discovered several cross-site scripting vulnerabilities in Gforge, an online collaboration suite for software development, which allow injection of web script code.
ea4e76e50df20b3ad10c37936618719ec062d9555422fae80ceae4f0aa4ee712