geronimo:geronimo-console (>=1.0 <=1.0-M5) potentially affected by CVE-2006-0254 via geronimo:geronimo-console-standard (>=1.0 <=1.0-M5)

geronimo:geronimo-console-standard MAVEN version =1.0, =1.0, =1.0-M5 Source cves: CVE-2006-0254 Source advisory: OSV:GHSA-2JXH-3CX8-XW65...

GHSA-2JXH-3CX8-XW65 Apache Geronimo console 1.0 vulnerable to cross-site scripting

Multiple cross-site scripting XSS vulnerabilities in Apache Geronimo 1.0 allow remote attackers to inject arbitrary web script or HTML via the 1 time parameter to cal2.jsp and 2 any invalid parameter, which causes an XSS when the log file is viewed by the Web-Access-Log viewer. Version 1.1 contai...