CVE-2022-43670
XSS in Sling CMS Reference App Taxonomy Path
Résumé
XSS in Sling CMS Reference App Taxonomy Path
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the taxonomy management feature.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com