Skip to content
OpenAdvisories

Product · WSO2

WSO2 Carbon API Management API

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2025-4760

    Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher

    An authenticated stored cross-site scripting (XSS) vulnerability exists in multiple WSO2 products due to improper validation of user-supplied input during API document upload in the Publisher portal. A user with publisher privileges can upload a crafted API d…

    WSO2 WSO2 API Manager WSO2 API Control Plane WSO2 Traffic Manager Maven