CVE-2026-118413

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 4.0 through 6.1.6 allows a weblog administrator to store script that runs in the browsers of the weblog's visitors. Blogroll links imported from an OPML file were not checked, and the default theme...