Sling Cms (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 12 known versions, newest CVE from 2023-02-04. Vendor: Apache.

CVEs of Sling Cms

• CVE-2023-22849 - CVSS 6.1 (medium), 2023-02-04: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may…
• CVE-2022-46769 - CVSS 5.4 (medium), 2023-01-09: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may…
• CVE-2022-43670 - CVSS 5.4 (medium), 2022-11-02: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may…
• CVE-2020-1949 - CVSS 6.1 (medium), 2020-04-01: Scripts in Sling CMS before 0.16.0 do not property escape the Sling Selector from URLs when generating navigational elements for the administrative consoles…