PT-2020-15187

Name of the Vulnerable Software and Affected Versions Sling CMS versions prior to 0.16.0 Description The issue concerns reflected XSS attacks due to improper escaping of the Sling Selector from URLs when generating navigational elements for the administrative consoles. Recommendations For version...

CVE-2020-1949: Improper Neutralization of Input During Web Page Generation

Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles and are vulnerable to reflected XSS attacks...