PT-2014-1721

Name of the Vulnerable Software and Affected Versions Oracle Mojarra versions 2.2.x through 2.2.5 Oracle Mojarra versions 2.1.x through 2.1.27 Description The issue arises from inadequate encoding when using a h:outputText tag or an EL expression after a script or style block, allowing remote...