8 matches found
CVE-2026-108338
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
EUVD-2026-123503
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
CVE-2026-108338
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
CVE-2026-108338
Apache Roller versions 5.0.1 through 6.1.6 are vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation, where the tag filter allows HTML characters in tag names. Specifically, the bundled gaurav , fauxcoly ...
CVE-2026-108338 Apache Roller: Stored cross-site scripting through AtomPub entry tags
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
CVE-2026-108338 Apache Roller: Stored cross-site scripting through AtomPub entry tags
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
CVE-2026-108338: Apache Software Foundation Apache Roller: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Apache Roller 5.0.1 through…
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...
PT-2026-145175
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in Apache Roller 5.0.1 through 6.1.6 allows an authenticated user with the Author role on a weblog to store script in entry tags submitted through AtomPub. Roller's tag filter allowed HTML characters in tag names,...