An unauthenticated Cross Site Scripting (XSS) vulnerability exists in ReviewX versions up to and including 2.3.10. This vulnerability allows attackers to execute arbitrary scripts in the context of a user's browser without requiring authentication. The vulnerability is identified as CWE-79 and has a high severity rating based on available data.