CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73238

The provided documents indicate that Apache Allura is susceptible to a Cross-Site Scripting (XSS) vulnerability within its code display functionality. This flaw affects versions prior to 1.19.1 . The vulnerability allows for the execution of malicious scripts in a user's browser context. To remed...

CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...