Lucene search
+L

3 matches found

OSV
OSV
added 2022/01/08 12:46 a.m.19 views

GHSA-JG6J-JRXV-2HH9 Cross-site Scripting in Apache Pluto

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS5.9AI score0.02327EPSS
SaveExploits0References3
OSV
OSV
added 2022/01/06 9:15 a.m.11 views

CVE-2021-36738

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1CVSS6.4AI score0.02327EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/01/06 8:50 a.m.35 views

CVE-2021-36738 XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet

The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting XSS attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact...

6.1AI score0.02327EPSS
SaveExploits0References1
Rows per page
Query Builder