Skip to content
OpenAdvisories

Package · Maven

org.apache.struts:struts2-core

60 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    CVE-2011-1772 Public exploit EPSS 33%

    Cross-site Scripting in Apache Struts

    Multiple cross-site scripting (XSS) vulnerabilities in XWork in Apache Struts 2.x before 2.2.3, and OpenSymphony XWork in OpenSymphony WebWork, allow remote attackers to inject arbitrary web script or HTML via vectors involving (1) an action name, (2) the act…

    org.apache.struts:struts2-core Maven