CVE-2022-43670
XSS in Sling CMS Reference App Taxonomy Path
Summary
XSS in Sling CMS Reference App Taxonomy Path
Original description
The description as published by the source.
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com