A vulnerability labeled as problematic has been found in Gitea up to 1.20.0. This impacts an unknown function. Executing manipulation can lead to cross site scripting.

This vulnerability is handled as CVE-2025-68946. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.