CVE-2024-29217

The Apache Answer Q&A platform (specifically github.com/apache/incubator-answer) is vulnerable to a Cross-site Scripting (XSS) issue in versions before 1.3.0 . The root cause is the improper neutralization of input during web page generation, specifically when a logged-in user modifies their pers...