{"id":"CVE-2024-6886","title":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.","summary":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.","severity":"critical","cvss":10,"cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","cwe":["CWE-79"],"vendor":"Gitea","product":"Gitea Open Source Git Server","affected":["open_source_git_server 1.22.0"],"published":"2024-08-06","updated":"2026-06-17","sourceUpdated":"2026-06-17T08:18:54.397","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-6886","references":[{"url":"https://blog.gitea.com/release-of-1.22.1/","label":"88ee5874-cf24-4952-aea0-31affedb7ff2"},{"url":"https://github.com/go-gitea/gitea/pull/31200","label":"88ee5874-cf24-4952-aea0-31affedb7ff2"}],"tags":["nvd","cve.org","exploit-available"],"ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2024-08-06T14:26:58.912514Z"},"cvssSource":"cna","ingestedAt":"2026-09-14T13:50:03.560Z","epss":0.32968,"epssPercentile":0.98305,"exploits":{"nuclei":["CVE-2024-6886"],"checkedAt":"2026-09-26T09:05:31.861Z"},"exploitAvailable":true,"slug":"CVE-2024-6886","body":"## Overview\n\nImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Gitea Gitea Open Source Git Server allows Stored XSS.This issue affects Gitea Open Source Git Server: 1.22.0.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":74,"depthScoreParts":{"impact":55,"likelihood":6.6,"exploitation":12,"ransomware":0},"changes":[{"seq":202704,"id":"CVE-2024-6886","ts":1789402493629,"field":"exploit_available","old":"false","new":"true"},{"seq":202703,"id":"CVE-2024-6886","ts":1789402493629,"field":"epss","old":null,"new":"0.32968"}]}