Apache Sling App Cms (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-02-04. Vendor: Apache Software Foundation.

CVEs of Apache Sling App Cms

• CVE-2023-22849 - CVSS 6.1 (medium), 2023-02-04: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.4 and prior may…
• CVE-2022-46769 - CVSS 5.4 (medium), 2023-01-09: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.2 and prior may…
• CVE-2022-43670 - CVSS 5.4 (medium), 2022-11-02: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Sling App CMS version 1.1.0 and prior may…