Product · Apache Software Foundation

Apache Sling App CMS

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.1

CVE-2023-22849

Apache Sling App CMS: XSS in CMS Reference / UI Components

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in mult…

Apache Software Foundation Apache Sling App CMS org.apache.sling:org.apache.sling.cms Maven

Feb 4, 2023
Medium 5.4

CVE-2022-46769

Apache Sling App CMS: XSS in CMS Site Group Detail

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may allow an authenticated remote attacker to perform a reflected cross-site scripting (XSS) attack in the …

Apache Software Foundation Apache Sling App CMS org.apache.sling:org.apache.sling.cms Maven

Jan 9, 2023
Medium 5.4

CVE-2022-43670

XSS in Sling CMS Reference App Taxonomy Path

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may allow an authenticated remote attacker to perform a reflected cross site scripting (XSS) attack in the …

Apache Software Foundation Apache Sling App CMS org.apache.sling:org.apache.sling.cms Maven

Nov 2, 2022