Cross-site scripting (XSS) vulnerability in the login panel (svn/login/) in User-Friendly SVN (aka USVN) before 1.0.7 allows remote attackers to inject arbitrary web script or HTML via the username field.
- http://packetstormsecurity.com/files/127177/User-Friendly-SVN-Cross-Site-Scripting.html
No PoCs found on GitHub currently.