CVE-2026-103863

A flaw was found in Apache Sling Engine. This vulnerability allows an attacker to conduct stored Cross-Site Scripting XSS attacks by evading security header protections. Included components can bypass header and content-type enforcement mechanisms through manipulated response headers, character s...