Apache Sling CMS 跨站脚本漏洞

Apache Sling CMS is a content management system CMS from the Apache Foundation USA. A cross-site scripting vulnerability exists in Apache Sling CMS version 1.1.0 and prior versions, which stems from incorrect neutralization of inputs during web page generation, and could allow an authenticated,...

Apache Sling CMS Cross-Site Scripting Vulnerability

Apache Sling CMS is an intuitive, full-featured content management system. A reflected cross-site scripting vulnerability exists in Apache Sling CMS versions prior to 0.16.0. The vulnerability stems from a script in Sling CMS that does not escape the URL's Sling Selector when generating navigatio...