10 matches found
apache__sling-org-apache-sling-xss_CVE-2016-5394_1-0-8
Apache Sling XSS Bundle The Apache Sling XSS Bundle provides two services for escaping and filtering XSS-prone user submitted content: 1. org.apache.sling.xss.XSSAPI 2. org.apache.sling.xss.XSSFilter Please check the JavaDoc of each service to find out what methods they provide...
PT-2026-97253
Name of the Vulnerable Software and Affected Versions Apache Sling XSS versions prior to 2.4.12 Description Improper neutralization of input during web page generation allows for a reflected cross-site scripting XSS attack. This occurs when using the getValidHref function within the XSSAPI class,...
EUVD-2018-16661
Malware in sbrugna...
CVE-2018-4876
Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...
CVE-2018-4876
Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...
Cross site scripting
Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...
CVE-2018-4876
CVE-2018-4876 affects Adobe Experience Manager 6.1–6.3. The vulnerability is a cross-site scripting flaw caused by a bypass of the Sling XSSAPI#getValidHref function, enabling an attacker to obtain sensitive information. Adobe’s advisory APSB18-04 confirms security updates addressing CVE-2018-487...
CVE-2018-4876
Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...
PT-2018-16585
Name of the Vulnerable Software and Affected Versions Adobe Experience Manager versions 6.1 through 6.3 Description The issue allows for cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function. Recommendations For Adobe Experience Manager versions 6.1 through 6.3, update to a...
CVE-2018-4876: Improper Neutralization of Input During Web Page Generation
Adobe Experience Manager versions 6.3, 6.2, and 6.1 are vulnerable to cross-site scripting via a bypass of the Sling XSSAPIgetValidHref function...