apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8

Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...

PT-2026-97253

Name of the Vulnerable Software and Affected Versions Apache Sling XSS versions prior to 2.4.12 Description Improper neutralization of input during web page generation allows for a reflected cross-site scripting XSS attack. This occurs when using the getValidHref function within the XSSAPI class,...

EUVD-2018-16661

Malware in sbrugna...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

Cross site scripting

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...

CVE-2018-4876

CVE-2018-4876 affects Adobe Experience Manager 6.1–6.3. The vulnerability is a cross-site scripting flaw caused by a bypass of the Sling XSSAPI#getValidHref function, enabling an attacker to obtain sensitive information. Adobe’s advisory APSB18-04 confirms security updates addressing CVE-2018-487...

CVE-2018-4876: Improper Neutralization of Input During Web Page Generation

Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...