Apache Sling Cms
4 CVEs affecting Apache Sling Cms. Latest disclosed: 2023-02-04. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22849 | Medium | 6.1 | 2023-02-04 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may all… |
CVE-2020-1949 | Medium | 6.1 | 2020-04-01 | Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles an… |
CVE-2022-46769 | Medium | 5.4 | 2023-01-09 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may all… |
CVE-2022-43670 | Medium | 5.4 | 2022-11-02 | An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may all… |