Unrated

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative co...

CVE-2020-1949 First seen on SecPulse Apr 2, 2020

Original description The description as published by the source.

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory s.apache.org

Key facts

Severity: Unrated
Published: Apr 2, 2020
First seen on SecPulse: Apr 2, 2020

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:52