CVE-2026-80180: Apache Allura: Stored XSS via markdown HTML processing

<p>Posted by Dave Brondsema on Sep 03</p>Severity: critical<br /> <br /> Affected versions:<br /> <br /> - Apache Allura through 1.20.0<br /> <br /> Description:<br /> <br /> Stored XSS via markdown HTML processing in Apache Allura.<br /> <br /> This issue affects Apache Allura: from through 1.20.0.<br /> <br /> Users are recommended to upgrade to version 1.21.0, which fixes the issue.<br /> <br /