Cross-site scripting (XSS) vulnerability in ViewGit 0.0.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the f parameter.
- http://st2tea.blogspot.com/2012/01/viewgit-cross-site-scripting.html
No PoCs found on GitHub currently.