CVE-2026-2102

wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...