CVE-2026-31906 Apache OFBiz: Reflected XSS via Improper HTML Attribute Escaping in Layered-Modal Dialog Parameters

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 24.09.06. Users are recommended to upgrade to version 24.09.06, which fixes the issue...

CVE-2026-31906

Apache OFBiz versions prior to 24.09.06 are vulnerable to a Cross-site Scripting (XSS) flaw caused by the improper neutralization of input during web page generation. Specifically, the vulnerability is triggered by improper HTML attribute escaping within Layered-Modal Dialog parameters . This fla...