Skip to content

Vulnerabilities of Apache Software Foundation Apache Sling XSS

Is your version affected?

CVE Summary Score Published
CVE-2026-91928 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS Not rated Sep 23, 2026
CVE-2026-91852 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS Not rated Sep 23, 2026
CVE-2026-91999 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS Not rated Sep 23, 2026
CVE-2026-92001 Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS Not rated Sep 23, 2026
CVE-2026-73192 An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when… Not rated Sep 23, 2026

Other Apache Software Foundation products