CVE-2025-23026

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with "script" tags or script attributes that include a Javascript template string backticks are subject to XSS. The "javaScriptBlock" and "javaScriptAttribute" methods...

CVE-2025-23026: Improper Neutralization of Input During Web Page Generation

jte Java Template Engine is a secure and lightweight template engine for Java and Kotlin. In affected versions Jte HTML templates with script tags or script attributes that include a Javascript template string backticks are subject to XSS. The javaScriptBlock and javaScriptAttribute methods in th...