CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...

CVE-2026-73238

A Cross-Site Scripting (XSS) vulnerability exists in the code display feature of Apache Allura . This flaw affects versions before 1.19.1 . The vulnerability allows for the improper neutralization of script-related HTML tags, potentially leading to script execution in the user's browser. To remed...

CVE-2026-73238 Apache Allura: XSS in code display

XSS vulnerability in code display in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue...