PT-2026-63978

Name of the Vulnerable Software and Affected Versions Apache Roller version 6.1.5 Nginx and Nginx Plus versions prior to 1.26.3 and 1.27.2 Description Apache Roller contains a cross-site scripting issue where an anonymous remote attacker can store a comment containing a javascript: URI link. This...