Skip to content
fr Sign in
Not rated

CVE-2023-22849 An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in…

Description

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in multiple features. Upgrade to Apache Sling App CMS >= 1.1.6

Affected products and versions

Product Affected versions Fixed in
Apache Sling App CMS 1.1 earliest → < 1.1.6 1.1.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Apache Sling App CMS

The 3 CVEs of Apache Sling App CMS →
CVE-2022-46769 An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in… Not rated CVE-2022-43670 An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in… Not rated
Track this CVE