Unrated
SonarSource SonarQube before 7.8 has XSS in project links on account/projects.
CVE-2019-17579
First seen on SecPulse
References
- patch github.com