CVE-2023-50175

Stored XSS in GROWI App Settings (/admin/app), Markdown Settings (/admin/markdown), and Customization (/admin/customize) (GROWI のアプリ設定 (/admin/app)・マークダウン設定 (/admin/markdown)・カスタマイズ (/admin/customize) における格納型XSS )

In GROWI v6.0.0 and earlier versions, it is possible to bypass security mechanisms and execute XSS by omitting the closing > in a tag string.