Lucene search
Veracode Vulnerability DatabaseVERACODE:33537HistoryJan 07, 2022 - 3:41 a.m.
Cross-site Scripting (XSS)
2022-01-0703:41:30
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
56.7%
applicant-mvcbean-cdi-jsp-portlet is vulnerable to cross-site scripting. The library does not properly escape the user input parameters in confirmation.jspx, allowing an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| applicant-mvcbean-cdi-jsp-portlet | eq | 3.1.0 | |
| applicant-mvcbean-cdi-jsp-portlet | eq | 3.1.0 |
Related
osv
osv
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17
cnvd
cnvd
Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-04997)
2022-01-10 00:00:00
prion
prion
Cross site scripting
2022-01-06 09:15:00
nvd
nvd
CVE-2021-36738
2022-01-06 09:15:07
cve
cve
CVE-2021-36738
2022-01-06 09:15:07
cvelist
cvelist
github
github
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17