2 matches found
Apache Jackrabbit contains Cross-site Scripting
Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...
4.3CVSS4.3AI score0.26778EPSS
SaveExploits4References10Affected Software1
CVE-2009-0026: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Apache Jackrabbit before 1.5.2 allow remote attackers to inject arbitrary web script or HTML via the q parameter to 1 search.jsp or 2 swr.jsp...
4.3CVSS5.9AI score0.26778EPSS
SaveExploits4References2
20