CVE-2020-35305

CVE-2020-35305

Cross site scripting (XSS) in gollum 5.0 to 5.1.2 via the filename parameter to the ‘New Page’ dialog.

Source: CVE-2020-35305