An XSS vulnerability has been detected in Repox, which allows an attacker to compromise interactions between a user and the vulnerable application, and can be exploited by a third party by sending a specially crafted JavaScript payload to a user, and thus gain full control of their session.
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-repox