CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet

[
  {
    "product": "Apache Portals",
    "vendor": "Apache Software Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "org.apache.portals.pluto.demo:applicant-mvcbean-cdi-jsp-portlet 3.1.0"
      }
    ]
  }
]