Skip to content
OpenAdvisories

Package · Maven

org.apache.struts:struts2-parent

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium —
    CVE-2012-1006 Public exploit EPSS 57%

    Apache Struts Multiple Cross-site Scripting Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in Apache Struts 2.0.14 and 2.2.3 allow remote attackers to inject arbitrary web script or HTML via the (1) name or (2) lastName parameter to struts2-showcase/person/editPerson.action, or the (3) clientName …

  • Medium —

    Apache Struts Multiple XSS Vulnerabilities

    Multiple cross-site scripting (XSS) vulnerabilities in component handlers in the javatemplates (aka Java Templates) plugin in Apache Struts 2.x before 2.2.3 allow remote attackers to inject arbitrary web script or HTML via an arbitrary parameter value to a .a…