Threats affecting pkg:maven/org.apache.sling/xss

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.1	EPSS 0.8%	CVE-2026-91852Apache Sling XSS · Cross-site Scripting Medium6.1EPSS 0.8%2026-09-23CVE Database V5CVE-2026-91852 Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS. This issue affects Apache Sling XSS: before 2.4.12. Users are recommended to upgrade to version 2.4.12, which fixes the issue. EPSS 0.8%Vulnerability Apache Software Foundation CWE-79	CVE Database V5	2026-09-23

Page 1 of 1